1138d5073cce163f2405c527c73659fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1138d5073cce163f2405c527c73659fd
Size

13KB
MD5

1138d5073cce163f2405c527c73659fd
SHA1

5365ec1e36a2c5080be92e369eb9dc681103438f
SHA256

a5b421e8a241419bcbaf53acefa745e11b690e2ab7092994710d2b7cb8ba85c5
SHA512

5f11978f3334b51661d71d10d182ad1962e225052573b5c075e09baef4cadae2b27c0fedf719bb2cbd9d438d47be3c22448cf186fd8cb3c03007da73f963251c
SSDEEP

192:yMOHeP1aMSPW3zsudAL9a5xhM8b12y52sWmCTcfe4WDa:yMOTMc6ALCzB2y52sWxTGWDa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1138d5073cce163f2405c527c73659fd

Files

1138d5073cce163f2405c527c73659fd
.exe windows:4 windows x86 arch:x86

b30d8a45e99c9fbf2a8616812e4bbc0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
Sleep
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcatA
Process32First
GetCurrentProcessId
OpenProcess
Process32Next

user32

FindWindowExA
PostMessageA
GetWindowTextA
GetForegroundWindow
wsprintfA
MessageBoxA
MessageBeep
GetMessageA
keybd_event
DispatchMessageA
TranslateMessage

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

msvcrt

??2@YAPAXI@Z
_except_handler3
_itoa
_stricmp
strrchr
atoi

netapi32

Netbios

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ