432fc7728b8810abb26cad383bb53022 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

432fc7728b8810abb26cad383bb53022
Size

15KB
MD5

432fc7728b8810abb26cad383bb53022
SHA1

118ad66250e404d7acdda728c4cc26525e9b4a82
SHA256

8535911b48728607f3cb916f3d865ff4ae4d34f4b8681978fbc8f28892692ce7
SHA512

f98f62393db30ff01f98e8ba6333e88e781513688b000bd4587bb144b5d20cde828e56edc223b9f2b60d060dbcea5c8ecd4a51cc5563c18d042e524f1f88cb18
SSDEEP

384:oSPeboHkZv8N00XjU1ZNVhnkuco74FlumJJayH/SD:46swUFLnkw4Fl5ec/SD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
432fc7728b8810abb26cad383bb53022

Files

432fc7728b8810abb26cad383bb53022
.exe windows:4 windows x86 arch:x86

81c741db70dcb4766619ccf6274a182a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
wsprintfA

kernel32

GetStartupInfoA
lstrcpyA
lstrcmpiA
CloseHandle
CreateFileA
CreateProcessA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
WriteFile
lstrcatA

Sections

.text
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ