1089016058a364e3ab782746ba6cb283 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1089016058a364e3ab782746ba6cb283
Size

118KB
MD5

1089016058a364e3ab782746ba6cb283
SHA1

9b475b659bdd84ab4127b422784d01fffea6c76f
SHA256

ca88bc3967c0cafdd2cd7fd584202c9f96a737256a5aaf98ef5b278751732664
SHA512

92ed0630644bcafe6675f705ef62952554b065db0815a968f31cc291c7e492ce8d96bca96c223f11fc3a6be4336f87a698a7c84f5fa0e150c7f048a2fc8afe58
SSDEEP

3072:UN8WGrzqhFc/Y84oKFOAYIIqZc511S9UAFJGFjDbTGY:UNt5U/rHLIzhTKVDX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1089016058a364e3ab782746ba6cb283

Files

1089016058a364e3ab782746ba6cb283
.exe windows:4 windows x86 arch:x86

4a4b1d15f9a987c5998c172bab98ba2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListFirst
LoadLibraryA
CreateMutexA
GetConsoleAliasA
GetProcAddress

user32

InSendMessageEx
BroadcastSystemMessageExW
LockWindowStation
wvsprintfA
BringWindowToTop

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 366B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 349B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 515B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ