1abfce0e435c5321baf29339d8154e73 | Triage

Sharing

General

Target

1abfce0e435c5321baf29339d8154e73
Size

98KB
MD5

1abfce0e435c5321baf29339d8154e73
SHA1

c1fb07a509218cc1b031129305c4b616fd4a6e3d
SHA256

56736d5a79558b180ab0c247dd700dbe48536af5503ec1cd69ebe373be1ddc08
SHA512

39e615940a6122cf2bf3bf22b9cd709d8d56478bff1b3b38af5e74de666475fbc781e46d4c1bb9858590b8bcfda9681bfa2be1ff30f29eebcdd43c84d55a485e
SSDEEP

1536:3V8hZ/lGSA3AsWG6qcTTSBJ8Ud9+zQVrBrpBjNIXbl5eY8bno0QzfbLah:F8he3gbTiJ8UGQVrBfNaeYECzjLah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abfce0e435c5321baf29339d8154e73

Files

1abfce0e435c5321baf29339d8154e73
.exe windows:4 windows x86 arch:x86

3851c27f551502dd1b585c695777b4b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
CreateFileA
GetOEMCP
GetACP
SetFilePointer
lstrcpyA
GetCurrentProcess
GetStdHandle
MultiByteToWideChar
SetHandleCount
GetModuleFileNameA
GetCommandLineA
lstrcatA
LCMapStringA
LCMapStringW
GetStringTypeA
GetFileType
GetVersion
GetStartupInfoA
lstrcpynA
WriteFile
GetCPInfo

user32

InsertMenuA
LoadCursorA
IsMenu
GetDlgItem
CopyIcon
DrawTextW
CopyImage
GetDC
GetWindowTextLengthA
CloseWindow
GetFocus
GetWindowTextA
DrawIcon
CreateIcon
DrawIconEx
IsWindow
LoadMenuA
GetMenu
DialogBoxParamA
CopyRect
EndDialog
DialogBoxParamW

comctl32

ImageList_LoadImageA
CreateStatusWindow
DllGetVersion
ImageList_Add
MenuHelp
ImageList_Create
ImageList_AddIcon
ImageList_Draw
ImageList_LoadImageW
ImageList_Copy
CreateStatusWindowW
DrawStatusText

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 16.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ