161b0a0421a0c90568c58798c35023ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

161b0a0421a0c90568c58798c35023ed
Size

393KB
MD5

161b0a0421a0c90568c58798c35023ed
SHA1

d88eda5cfc9ff8c786699c4cdd8595ea5d0cd9ae
SHA256

26bc6324b4369834dbd824ea56187cdeea94531601f0a9285e602d44fcac3117
SHA512

8bd5e52b7552ef84580cc3975ef0d9060a575a646d26ca8b493053de2a7773499c188d58d36303bc7fc3692a318cba4114e581d46d3e3dc6877786db5d09070e
SSDEEP

12288:Mi3KpJI6xj1dV9fJcEXW4OYIb5IiENCaak:MiCb1dV9fJhXWGHNqk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
161b0a0421a0c90568c58798c35023ed

Files

161b0a0421a0c90568c58798c35023ed
.exe windows:4 windows x86 arch:x86

3c84ff2534b71fbf4f7a5a4e63f007cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
Sleep
GetConsoleAliasA
CreateFileMappingA
GetACP
FindClose
LocalLock
TlsGetValue
LocalFree
WaitForMultipleObjects
FindAtomA
HeapCreate
GetCalendarInfoA
FreeEnvironmentStringsA
GetConsoleCP
CreateFileA
GetLastError
LoadLibraryExA
CloseHandle
GlobalUnlock

user32

IsWindow
DrawEdge
SetFocus
GetDC
DefWindowProcA
DrawTextA
CallWindowProcA
GetDlgItem
GetMessageA
GetIconInfo
DispatchMessageA
CreateDialogParamA
CascadeWindows
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ