051235a3d6f3ca05472e442d8eaf619c | Triage

Sharing

General

Target

051235a3d6f3ca05472e442d8eaf619c
Size

15KB
MD5

051235a3d6f3ca05472e442d8eaf619c
SHA1

cb9e5b3f058ae76c6a8516bb73bba9a961d8604b
SHA256

149ba95be553c9ede131ec7bc0633344d3bda9c8f58243b6e6b408b9cada5792
SHA512

d2adab9bb4516e6b6b4f95ae1e5bff961b44033e0a0ffddc01138e132e476bac79bcfc0253c28fe3105c30433a2010f5508db5b99f2826a28e30bfa05d3fd02b
SSDEEP

192:7OHePBzMaNcHuEsSdyvGB2UX75xWA0Y24WDapUW781gW:7O6zPSIAZ5xWKWDaOW781gW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
051235a3d6f3ca05472e442d8eaf619c

Files

051235a3d6f3ca05472e442d8eaf619c
.exe windows:4 windows x86 arch:x86

db507a75104ab46b1251b28ef400b482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ