2087103514d3cc770e703a305b9f5c89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2087103514d3cc770e703a305b9f5c89
Size

37KB
MD5

2087103514d3cc770e703a305b9f5c89
SHA1

f0e81bd0b5cf387c14c0f482b6d4f6d3621eef30
SHA256

bf0039b2bab64e077cea4d29cc5f33b014310f80f7aa17dcea876ccb4e55a0a7
SHA512

7857dbebb2db021bdc00d4114938815abf567756c980370e6bbcf88a45e53c185025c09371630c6d1c04d62d037de5744b2674979718caa2108e3f2edfcd5c38
SSDEEP

192:I4jyCUTRKtWtHfkmYGB/LYsKcOCyS00q1EIB4hqPRbro+bghEP17xOaraIE/swU:I4O3MWt/kLGBLEBRBowjJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2087103514d3cc770e703a305b9f5c89

Files

2087103514d3cc770e703a305b9f5c89
.exe windows:4 windows x86 arch:x86

db348bac572ca6e79f8dd6296c132b2e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
GetFileSize
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadResource
LockResource
MapViewOfFile
ReadFile
SetFilePointer
UnmapViewOfFile
WriteFile
lstrcpyA
lstrlenA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

shell32

ExtractIconA

user32

DestroyIcon
DialogBoxParamA
EndDialog
LoadIconA
MessageBoxA
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA

Sections

eec0
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE