13d08c41f10ca8f0e256d9bf7d0f923a | Triage

Sharing

General

Target

13d08c41f10ca8f0e256d9bf7d0f923a
Size

15KB
MD5

13d08c41f10ca8f0e256d9bf7d0f923a
SHA1

67a8a56ad894df7dd2dd5a7ac2b5c28e53d9b69d
SHA256

7b3a7ef09e0dda6d92dd20e14a81688577be4fb2c928d38bdbf81bdf7a82de53
SHA512

e66a19a02a6a0c3272a542093a7cbfdc621559b34f189238a5f9c9d907248e2e907a0c73973ba87df0d739f0b224c18a12268e0cfacecf73de6a44c56c0cf7e3
SSDEEP

384:wZ3cJoOxFZv8SLUY51NkDjk6kRiz1v+12Qe7TG:BHxLR4W2Djk6kRa1v+gTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d08c41f10ca8f0e256d9bf7d0f923a

Files

13d08c41f10ca8f0e256d9bf7d0f923a
.exe windows:4 windows x86 arch:x86

ac499dfe30514f793676102a6ecabbb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
MessageBoxA
GetWindowTextA
FindWindowA
wsprintfA

kernel32

GetModuleHandleA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
TerminateProcess
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource

Sections

.text
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ