39f9a8f8e47af237a41a6234ea90cd72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39f9a8f8e47af237a41a6234ea90cd72
Size

32KB
MD5

39f9a8f8e47af237a41a6234ea90cd72
SHA1

6835f564009e242e3af11ccbbc68f27855b18b71
SHA256

7b948fe9265e7374705280b40eff4d3d9eb9adddad0bbd7ce2182798f15fe369
SHA512

57b70b0c2dadc5315c673972db6d2523c0001a86af51093d85b6f94f704ecfe6d9145051af415048cc334e8b045eb48fa1321b0962744ad3bb1e62a3f28e4fae
SSDEEP

768:l8SVQj2tg6erToh1kjizZSV/5s9sEWkqEnw:lcjkiTohWi+/G9sE6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f9a8f8e47af237a41a6234ea90cd72

Files

39f9a8f8e47af237a41a6234ea90cd72
.exe windows:4 windows x86 arch:x86

8f93ab33c34179dd4d1e51d3b3fa88b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
GetCommandLineA
CloseHandle
GetLastError
LocalFree
GetVersionExA
GetTickCount
LocalAlloc

msvcrt

wcschr
_exit
exit
wcstoul
__set_app_type
toupper
wcslen
__CxxFrameHandler
__getmainargs
_adjust_fdiv

user32

BeginPaint
DispatchMessageA
ScreenToClient
TranslateMessage
CreateWindowExA
LoadIconA
MessageBoxA
ShowWindow
EndPaint
GetWindowRect

Sections

.text
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ