230bf59c5bce205ee98e50eac3bdb448 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

230bf59c5bce205ee98e50eac3bdb448
Size

16KB
MD5

230bf59c5bce205ee98e50eac3bdb448
SHA1

d94f0a5915fa59e8f98a8753be095e7366dac7d0
SHA256

43874164be80393509fc245379b6fac9bac2a4732c5af1c897626eb5c1a7465d
SHA512

6c75d05dc796d6ae55bacc3a83841dc70cd984f16dc0cf42f18b57d06c8c6c34aa639a857042af33bd69e9bcfc3e34e555c2d7735f38af0c8c9f83eadfa8f9c2
SSDEEP

384:1n2aosU8fCNp1eGv5oqHz308PEe+HlHVV6FgCTvEZ:1NCxpW2ghFHTVMgscZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230bf59c5bce205ee98e50eac3bdb448

Files

230bf59c5bce205ee98e50eac3bdb448
.dll windows:4 windows x86 arch:x86

fdb7543c7b885e8a68ab548905ecd8a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualProtect
GetFileSize

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ