3c93a69e614b15c781c5e27a83b80784 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c93a69e614b15c781c5e27a83b80784
Size

34KB
MD5

3c93a69e614b15c781c5e27a83b80784
SHA1

121de6130d70aa1d4b704ac89ff5b7c948c06fe7
SHA256

e12dd6874af3991ea0969d5b75e9ff1b372f27eb0458366620a1cde5132a3c6f
SHA512

c98ceea7d49b123e4f3c9c833010fe5f193814dd1d80d0af262532d8046140b13bb08fe6eb7ef3a4cc519299bda10aeb9cea9339eee76a44e6e64d365c8a727f
SSDEEP

768:Ih3kxmQZ4aPgNAd7eBpJIhDd7lIAqlGajaWr5y:AIoNAd7eBQh0Alavw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c93a69e614b15c781c5e27a83b80784

Files

3c93a69e614b15c781c5e27a83b80784
.exe windows:4 windows x86 arch:x86

ad4e7aefec48a2608c473f1d2b0dcdbc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowLongA
SetWindowTextA
SetDlgItemTextA
SetCapture
SendMessageA
ReleaseCapture
PtInRect
MessageBoxA
InvalidateRect
GetWindowRect
GetParent
CallWindowProcA
DialogBoxParamA
EndDialog
GetActiveWindow
GetCapture
GetCursorPos
GetDlgCtrlID
GetDlgItem

kernel32

CreateThread
ExitThread
ResumeThread
SetThreadPriority
Sleep
WriteFile
lstrlenA
lstrcpyA
CloseHandle
CopyFileA
CreateFileA
ExitProcess
GetFileSize
GetModuleHandleA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
SetFilePointer
SuspendThread

shell32

ShellExecuteA

gdi32

SelectObject
SetBkMode
SetTextColor
GetStockObject
GetObjectA
CreateFontIndirectA

comdlg32

GetOpenFileNameA

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutGetPosition
waveOutClose
waveOutOpen

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ