39052a1653c7d54e3ab0051b4391db5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39052a1653c7d54e3ab0051b4391db5d
Size

32KB
MD5

39052a1653c7d54e3ab0051b4391db5d
SHA1

bb6a87503c9e6ac3064eb5f09dfa697a7bf773d1
SHA256

2345dda8e1e26fcee8921d505a1e2fa81c5182ebc476446b2317384575c9d206
SHA512

08eba0f6dfa6300675bc7e0adfd37c84e36044f74fe0a5242fc95e2029c9750d95470270ca74b5f66da0586a2d2d4478e1be018e1e84c52e2e5ad536757b5b11
SSDEEP

768:0TJ8uNfqjfXIz31Vjd3TMGlImo+JsRmkt5kp:iJD5qLYZdFJsq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39052a1653c7d54e3ab0051b4391db5d

Files

39052a1653c7d54e3ab0051b4391db5d
.exe windows:1 windows x86 arch:x86

ef8f873f9628ab1b40373f9cbaa34678

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
DefWindowProcA
SetWindowLongA

kernel32

LoadLibraryA
GetProcAddress
ExitProcess

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ