f90268c8342fc3e54ed7ad78635cc842 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f90268c8342fc3e54ed7ad78635cc842
Size

28KB
MD5

f90268c8342fc3e54ed7ad78635cc842
SHA1

500745ab7a7fe01bd09f978f266cddc88f4ba7f7
SHA256

42885fdedabb3ee939e38b4bd7d15bb857e5c6240ba011c4c5bdcd067b704bcf
SHA512

f940145d7dedbd3d447434e8cf197c422f1cb2b6540638d1423916902cc91b65812db3fa05cdc810346296b0ff77341a0f4abd3fb1ce9ef05bfbaf580932a974
SSDEEP

384:NBFVepLnzd9YtHsRp+9XJLYGbpouzIM2lAtghQY8V+:nKLYjPbCuz47x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f90268c8342fc3e54ed7ad78635cc842

Files

f90268c8342fc3e54ed7ad78635cc842
.exe windows:4 windows x86 arch:x86

9aaa0135f5722fed6500b9fcc064c607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
GlobalUnlock
CreateMutexA
CreateFileW
GetExitCodeProcess
SetLastError
lstrlenW
HeapCreate
GetProcessHeap
GetCurrentThreadId
GetStdHandle
GetEnvironmentVariableA
lstrcpyA
GlobalFree
CloseHandle
GetModuleHandleA
ReleaseMutex
FindResourceW
TlsGetValue
UnmapViewOfFile

user32

SetFocus
DrawMenuBar
IsWindow
CheckRadioButton
CallWindowProcA
GetCaretPos
GetDC
DrawEdge
CreateMenu
GetDlgItem
FillRect
CreateWindowExA
DispatchMessageA

rsaenh

CPDeriveKey
CPGenKey
CPHashData
CPDecrypt
CPSignHash

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dpqjkxe
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE