1878011305dace3f4711d6b39769b063 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1878011305dace3f4711d6b39769b063
Size

23KB
MD5

1878011305dace3f4711d6b39769b063
SHA1

89d9a5b83427dc1a74420048de88e0e44712f62e
SHA256

cb6ba8e4957ec50674f084540e1d5be8f1a3edc6a997759f3e97e9d06106be43
SHA512

26eec6bd49437bbcddc2e63c4e799c4f6f9b7b92ada00506e7333c8c3458f7273031800ea68b54c688825b571d23c7a307f802b6251836ff1370ca0be66d2265
SSDEEP

384:Cz9REb4vcYwsYgYujDCtcU/j7OZYUlDwgSJF2kYUvgawk7MrvwxKlA:8uJsYghS/fOlGVJFhYOgawk7Uwxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1878011305dace3f4711d6b39769b063

Files

1878011305dace3f4711d6b39769b063
.exe windows:4 windows x86 arch:x86

3970902550c5cc15b60f0490aa7c993d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
FreeLibrary
GlobalAlloc
GlobalFree
lstrcatA
Sleep
CreateEventA
GetCommandLineA
GetLastError

gdi32

SetROP2
GetPixel
GetDeviceCaps
CreateSolidBrush
PatBlt
CreateCompatibleDC

msvcrt

__p__fmode
wcstoul
__p__commode
__getmainargs
memmove
__setusermatherr
_adjust_fdiv

user32

GetFocus
GetWindowRect
SetWindowTextA
DestroyWindow
EndDialog
SetFocus
DefWindowProcA
ScreenToClient
LoadIconA
MessageBoxA
PostQuitMessage
BeginPaint
ShowWindow
DialogBoxParamA

Sections

.text
Size: 1024B - Virtual size: 987B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrs
Size: 15KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ