38455746c14ce97cba7a18f93abfa9d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38455746c14ce97cba7a18f93abfa9d1
Size

15KB
MD5

38455746c14ce97cba7a18f93abfa9d1
SHA1

d36cfa593e9da472f71f46e03448c6806d4379eb
SHA256

2b1550b0b860ffd99fecd2c134170503327c41700c19c6f3a7a6c4762146660f
SHA512

e9636eecd2d5b2336136cb1468e526092fdf191ae72d91b7d6621aaab1d610538c885726fad15ad0fa64501ff36266344a111024922f65765b2359db3176ae55
SSDEEP

192:8TMF93Uzsvdg7aa5EM8b12y5WmCTcfe4WDaawWDlgW:Lb7lgTEB2y5WxTGWDaawWDlgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38455746c14ce97cba7a18f93abfa9d1

Files

38455746c14ce97cba7a18f93abfa9d1
.exe windows:4 windows x86 arch:x86

b30d8a45e99c9fbf2a8616812e4bbc0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
Sleep
ExitProcess
GetLastError
CreateMutexA
CloseHandle
WriteFile
CreateFileA
TerminateProcess
CreateToolhelp32Snapshot
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
GetPrivateProfileStringA
lstrcatA
Process32First
GetCurrentProcessId
OpenProcess
Process32Next

user32

FindWindowExA
PostMessageA
GetWindowTextA
GetForegroundWindow
wsprintfA
MessageBoxA
MessageBeep
GetMessageA
keybd_event
DispatchMessageA
TranslateMessage

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA

msvcrt

??2@YAPAXI@Z
_except_handler3
_itoa
_stricmp
strrchr
atoi

netapi32

Netbios

Sections

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ