140df3eda9f34d54b77b5df9904585cb | Triage

Sharing

General

Target

140df3eda9f34d54b77b5df9904585cb
Size

7KB
MD5

140df3eda9f34d54b77b5df9904585cb
SHA1

9e9d9bda3ac375d9d87da62aafec2755b9e2b53b
SHA256

a68e878463264febb1cf294237c3043789c6899dd580bb94d7ac8614d2421660
SHA512

a3f1a607bc185ea4d272d370545ccba52676b37d6e01eed21fb2695a4c5ab70575134bc8ab54ee0fa6c47f6cd6e648037eda7bf11d2ce8c24e7c6fb5ad98df69
SSDEEP

48:62a5ESE9WwySff/9wUWc/LyF1e5B1iojrMwy2E3C5KlcjA4Utg5wnbnDPSauh5a8:Mm1ff1P/O6ygjA4UmCbDDuXaj3zT+GDe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
140df3eda9f34d54b77b5df9904585cb

Files

140df3eda9f34d54b77b5df9904585cb
.exe windows:1 windows x86 arch:x86

175aad28b448c28e6a323661c02254bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
CloseHandle
GetTempPathA
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
WaitForSingleObject
WriteFile
CreateProcessA
CreateThread

user32

LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
CreateWindowExA
DefWindowProcA

crtdll

__GetMainArgs
_sleep
exit
raise
signal
strchr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 520B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE