138398417d769f661abd54db192ff456 | Triage

Sharing

General

Target

138398417d769f661abd54db192ff456
Size

16KB
MD5

138398417d769f661abd54db192ff456
SHA1

46f127f55c10d6a7973af9cb1c7a6af9cf57e54d
SHA256

bd20cea0931c9776b98c2a491fe5b22243a812acadf4d028a7c7c5b6bae5339f
SHA512

42e19d24f585201aff1743a2425a2de3b07b8a0dd18cb746ee0ab27c379f99f2768d1ee7d72a50499256a3e05728ba7f52c056cd222355793e228c239b0d836e
SSDEEP

96:XK30H0GV2/wU1cpsjoyV7nS62sQC4o4fOYyTSzm9izZp43Z9N0YB/:00H0G6wU1cpscyV7SM4o4feeEEZpaHRd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
138398417d769f661abd54db192ff456

Files

138398417d769f661abd54db192ff456
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ