136cfc8442ca1aac45593f1bffb1bcf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

136cfc8442ca1aac45593f1bffb1bcf3
Size

240KB
MD5

136cfc8442ca1aac45593f1bffb1bcf3
SHA1

348fb70fb0c8f691ad66f97bf100a5556c3a351f
SHA256

7f545ad941bec1600f053578ac8ab22e7b99f3b0da6fcebe78a6d04920cb9a5d
SHA512

259a38c2a4fdead374cfac69a6b813d6c43e750e5120187d2c6751e7df5bf9af16e4a7149bbe14070aa822cb291f52e5190b228ce4de92fc7957f51188c8a68b
SSDEEP

6144:ae9rrZDMQJ+2hH3sGxNcUrWwTXtzQfLqdML6QmhZLP:D9rrRMQw2GsNhxdBUPmXLP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
136cfc8442ca1aac45593f1bffb1bcf3

Files

136cfc8442ca1aac45593f1bffb1bcf3
.exe windows:4 windows x86 arch:x86

9a378100e1da8a3a9409d8322ab3b0bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
ReadConsoleOutputAttribute
OpenSemaphoreA
GetNamedPipeHandleStateW
CancelDeviceWakeupRequest
SizeofResource
QueryDosDeviceA

user32

EnumPropsExW
EnableScrollBar
GetUserObjectSecurity
CharPrevW
GetWindowLongW
SetActiveWindow
DialogBoxParamA
ReplyMessage

gdi32

ExtEscape

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE