3a9232d5cb18357a097d3db5792a015c | Triage

Sharing

General

Target

3a9232d5cb18357a097d3db5792a015c
Size

118KB
MD5

3a9232d5cb18357a097d3db5792a015c
SHA1

3531a642a030a04edbe0e1b41d131c1fcb78286d
SHA256

c539925b36730c4a915f2d2453aff7602810b13cb09d0320a54b1f2c565104c6
SHA512

4bd2a573652f689d7918c1414bf6084a283f6277679f376b4b255367d266d1e1bdd15ded8c44e209ab7e86cae13c0e93aaa973685d453b0e9f7218de6966055a
SSDEEP

1536:thKig4jIabFhJ/CqWM3a6lhNAqwkiYOVsTFbD:qijJJ/B3ag7Aqwki1EFbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a9232d5cb18357a097d3db5792a015c

Files

3a9232d5cb18357a097d3db5792a015c
.exe windows:5 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 17KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 800B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE