490c67b7b8e82bda5a38c7180cb1e756 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

490c67b7b8e82bda5a38c7180cb1e756
Size

125KB
MD5

490c67b7b8e82bda5a38c7180cb1e756
SHA1

7f817b8bbe54a027a0f9ecd9a901933dcbba9434
SHA256

51e69f429a657e336f7af090c9b915010fb414d8ef22c5bd15e9f3c3cbd11bf0
SHA512

885791f6572a1d94823d07f690ce0fd434e97cab25cbcbb83b0d0373cbead088f05125a0a2f9073f58c5cd4a5a5b016f87c9bdcc9b0919ed874ef9fc554cfce1
SSDEEP

3072:knLXKRWSW3Tdv8xfaXOGd3XLsykuvut/34a8f:kOc9hv+CXtrsykuW3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490c67b7b8e82bda5a38c7180cb1e756

Files

490c67b7b8e82bda5a38c7180cb1e756
.exe windows:4 windows x86 arch:x86

cf3c39d32d1d5b093410134aed09d04e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetComputerNameA
lstrcmpiW
GetModuleHandleA
FindAtomW
LocalFree
ReleaseMutex
LoadLibraryW
ResetEvent
ResumeThread
GetCommandLineW
CreateThread
GetSystemTime
GetTickCount
SetEvent
GetDiskFreeSpaceW
GetFileAttributesW
CreateFileA
HeapCreate
SetLastError

user32

FillRect
CloseWindow
GetClipCursor
DispatchMessageA
GetComboBoxInfo
CallWindowProcA
DrawStateA
GetClassInfoA
GetKeyState
SetFocus
GetDlgItem
DestroyCaret
CreateWindowExA
MessageBoxA

cryptdlg

DecodeRecipientID
CertTrustInit
CertConfigureTrustA
CertTrustCertPolicy
CertTrustFinalPolicy

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE