43a5a4fa28512619ce88d517bb783807 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a5a4fa28512619ce88d517bb783807
Size

58KB
MD5

43a5a4fa28512619ce88d517bb783807
SHA1

23c8c7fbfacc04e7d34ce332eba97094d4bb9261
SHA256

505859917c63bdb7f917f2f2f1cd5b79734cd179179de27e97289a56eb801e52
SHA512

1529a626ce0114a941253448fd73840a5b2077051544e4dd63c43b0aef1d8cac4d10c5f73ff5f063c37971a8ebb856198267f2d466840c714247ef106950d09c
SSDEEP

1536:uTjfrEg0Nr7AL6qyIiBss4Ums7rkaNTl:OfQxUWIiOgj7rJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a5a4fa28512619ce88d517bb783807

Files

43a5a4fa28512619ce88d517bb783807
.exe windows:4 windows x86 arch:x86

b9ca3e99310bc9bf0453e395adf8ffb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
CreateFileA
lstrlenW
GetEnvironmentVariableA
ReleaseMutex
TlsGetValue
CreateMutexA
GetProcessHeap
CloseHandle
GetCurrentThreadId
TlsAlloc
GlobalFree
DeleteAtom
GetStdHandle
HeapCreate
FindResourceA
GetExitCodeProcess
GetModuleHandleA
LoadLibraryExA
SetLastError

user32

CreateWindowExA
CheckRadioButton
FillRect
DrawMenuBar
SetFocus
GetDC
CreateMenu
DispatchMessageA
CallWindowProcA
GetCaretPos
DrawEdge
IsWindow
GetDlgItem

rsaenh

CPSignHash
CPGenKey
CPHashData
CPDecrypt
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

azmwjhh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE