497adbe10c10cc9b96003b022224f6fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

497adbe10c10cc9b96003b022224f6fe
Size

69KB
MD5

497adbe10c10cc9b96003b022224f6fe
SHA1

88715c6c7cec4a9f04358b08e7f590871b209c5a
SHA256

d2ffc922647e5bc37cd0d2ae69dff7cb77bb9adec454afeb3b7ee1d150396b12
SHA512

6a2ca3c04143ab11ce7d03e1fa13721aea9be360b37e19c2c0290aa845d034c30e6e7683e42334f6b7917011b9a630ea0b3eb0293d88b864dc86ab18b5cb1168
SSDEEP

1536:qA5Bhx5BXI1/AZKzsL3erOw7wootGhkK5AZg9AmXZ+hkp:qMhbZI1/AZnL8Ow0j85AKCVqp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
497adbe10c10cc9b96003b022224f6fe

Files

497adbe10c10cc9b96003b022224f6fe
.exe windows:1 windows x86 arch:x86

b90a0de47ff65910c20931223d6db727

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetFileSize
GetModuleHandleA
GetProcAddress
GetVersion
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetTextColor

Sections

.data
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ