23774b9728046a5bbd88e911e35cac7b | Triage

Sharing

General

Target

23774b9728046a5bbd88e911e35cac7b
Size

113KB
MD5

23774b9728046a5bbd88e911e35cac7b
SHA1

37511c4df95f0c85a71c3a925a5211d927145578
SHA256

5af321ecaf8095cb13e150420ecfd9cbe2e34301aa053161f99d443165fda6d7
SHA512

309ec8d882b95e4f8ad0e2f0b8f8d4d10b29574f446b1f4ea669bf636745305bf2e4571decc2a2b37205a6518d0f5063091dd7ce494aba5bb574ec5a3142c2a3
SSDEEP

3072:Vzdi5eeo2O2hB6lwenb+5xc5+uW20CkmNmZi2j:3qUx2ai5xc5U2R1NmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23774b9728046a5bbd88e911e35cac7b

Files

23774b9728046a5bbd88e911e35cac7b
.exe windows:5 windows x86 arch:x86

3b56ba936eafd49dea8b2fe7c46406b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCommandLineW
GetEnvironmentStringsW
GetCurrentThread
GetVersionExA
CreateSemaphoreA
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
GetStdHandle
GetModuleHandleW
GetPriorityClass
CreateEventA
GetEnvironmentStrings
GetCurrentProcessId
GetTickCount
VirtualAlloc
GetCommandLineA
GetStartupInfoW

user32

GetForegroundWindow
CloseWindow
AnyPopup
GetWindowTextLengthA
GetDesktopWindow

gdi32

AbortDoc
GetTextColor
GetTextMetricsA
SetTextAlign

crypt32

CryptMsgUpdate

setupapi

SetupLogErrorA

msvcrt

_onexit
__dllonexit
_controlfp
__set_app_type
__p__fmode
_except_handler3
memcpy
_exit
_XcptFilter
exit
_wcmdln
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 98KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ