3733dd4592559a63a0174cebc138f5b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3733dd4592559a63a0174cebc138f5b2
Size

65KB
MD5

3733dd4592559a63a0174cebc138f5b2
SHA1

564fb21d073007665fccc003721c9f7e39535cbb
SHA256

41c26a880bcb372967afb54d4964479685b9eb1e03ef650c439573862eac6aa6
SHA512

3d20f6b1b204e91c62003bd07631c51c7407a13e29d5dc9170d473911baba587eb11ce074e5cc71f3c8ffb854fdd7b65208aa5f1ce52aeebebc1d0c0c77c82e8
SSDEEP

1536:K/dvQFZ7Fxqlq+MLMRqyBpB+j5eBYGp4mh:K/dv2ZFxqMFyBpglYvim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3733dd4592559a63a0174cebc138f5b2

Files

3733dd4592559a63a0174cebc138f5b2
.exe windows:4 windows x86 arch:x86

f42c74d4028ae0b857e515b4fd501339

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
ReleaseMutex
lstrcpyA
GetEnvironmentVariableA
lstrlenW
GlobalUnlock
FindResourceW
GetExitCodeProcess
CreateFileW
SetLastError
GetModuleHandleA
GetCurrentThreadId
UnmapViewOfFile
TlsGetValue
GetProcessHeap
CreateMutexA
GlobalFree
CloseHandle
HeapCreate
GetStdHandle

user32

CreateWindowExA
IsWindow
DrawMenuBar
CheckRadioButton
FillRect
GetCaretPos
CreateMenu
CallWindowProcA
GetDC
SetFocus
DrawEdge
GetDlgItem
DispatchMessageA

rsaenh

CPHashData
CPGenKey
CPDecrypt
CPSignHash
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE