13e943d5f2c847dddf9c0a756c7e768a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13e943d5f2c847dddf9c0a756c7e768a
Size

4.0MB
MD5

13e943d5f2c847dddf9c0a756c7e768a
SHA1

990769c39b545d11558346fddfc64360fe5aa53e
SHA256

cf98af3bcb62bc8404ae92d7a1a14631dcacb3688bd568c3e1b53c5765d8d0d5
SHA512

0fcff068de84fe5f74ceb41bc4154fd0172d887e4652437b11dfd34a368c295ab4a9afe530c422ab59bec1f4da8902b36701d677a8319cf7859263df67533f65
SSDEEP

98304:UHgqyMlXODWOWTP6maZ+gmcTJuwH2Fw0alYE0y0l1S+Mju4DS6H4LL:UAqBzkDue2FwH+RvS+Mju76mL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13e943d5f2c847dddf9c0a756c7e768a

Files

13e943d5f2c847dddf9c0a756c7e768a
.exe windows:4 windows x86 arch:x86

37ad55bbabdb5ac07ba2b40b25ef6a7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

.text
Size: 45KB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE