04f1080abea0a18de633f57ae4c18f86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f1080abea0a18de633f57ae4c18f86
Size

393KB
MD5

04f1080abea0a18de633f57ae4c18f86
SHA1

b0e0b28b12a79ca3e714d01482bccbddef0d9893
SHA256

1224c5af357b188d32270e5c75ab9c97c0092dca8ec9e7e5ec20f74248da44b2
SHA512

930f772c98df743695f1ec5067d4bf481151b21e24d3da70a3cff2d89996a019acac9fc62aa02b79bcd8a490f52f3e0f84cb90e097722fdc7d582751c407dac6
SSDEEP

12288:23KpJI6xj1dV9fJcEXW4OYIb5IiENCaY3:2Cb1dV9fJhXWGHNo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f1080abea0a18de633f57ae4c18f86

Files

04f1080abea0a18de633f57ae4c18f86
.exe windows:4 windows x86 arch:x86

6dfbbe0f33d00344227e62b7be5210b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
CloseHandle
GetCalendarInfoA
LocalFree
LocalLock
CreateFileA
GetConsoleCP
FreeEnvironmentStringsA
GetACP
FindAtomA
GlobalUnlock
LoadLibraryExA
GetConsoleAliasA
GetModuleHandleA
WaitForMultipleObjects
Sleep
GetLastError
TlsGetValue
HeapCreate
FindClose

user32

GetDlgItem
DrawEdge
CallWindowProcA
DefWindowProcA
GetMessageA
CascadeWindows
GetIconInfo
SetFocus
DispatchMessageA
GetDC
DrawTextA
CreateDialogParamA
IsWindow
MessageBoxA

msasn1

ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecCheck
ASN1BERDecNull
ASN1BERDecEoid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ