280aaa4333b3220bae2a912537252ea3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

280aaa4333b3220bae2a912537252ea3
Size

58KB
MD5

280aaa4333b3220bae2a912537252ea3
SHA1

6c0b2cf62e4d079e571055d31a7ab99196001992
SHA256

77ea75439dad2044e9e02bb922781b4e67454d5a0845dcc72ed0a429737bc008
SHA512

f93b7a58a845b0bf7d853d30aa53720d20b5ecbd12d0abba3425fc0fef77d76cb3ce520e17ba8e0578b7299d802977bc398387e97a64d608b643291ab528b6d6
SSDEEP

768:nysq0ruBYv5biqZEB/DSXQ5Iu43MFkQjPPc7tZ1rzhZrVQX9N5VWb3fFXk0WVuKb:n06huOq/DS2XkqP+H5H+XvKfJk0WVuQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
280aaa4333b3220bae2a912537252ea3

Files

280aaa4333b3220bae2a912537252ea3
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE