51d73af9702db0af6d789f44d3a4eb63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51d73af9702db0af6d789f44d3a4eb63
Size

181KB
MD5

51d73af9702db0af6d789f44d3a4eb63
SHA1

70d9b93bd994725980a63d851b1e0bfecc69d234
SHA256

859115a91529c83e833d40b0fed8b69d3c30553236cdfc681fe03bcb0aafa9be
SHA512

5f702aae1814567d9fd7ece70980bdb59b31c8723ddff39564993ca32926162705c847f73fc6c51d8bd9e27d4d7e116217455965a0bb0450dc1d482809083223
SSDEEP

1536:Mv69N58mgfmzBe2/d5K18/dNnv0XBd51fzdJGKKTUCW31w6x/Z:Q69W+zBe2/dW8/d1vwB5GC9Fn/Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51d73af9702db0af6d789f44d3a4eb63

Files

51d73af9702db0af6d789f44d3a4eb63
.exe windows:4 windows x86 arch:x86

70bb31f108edcc0ad97bf87c0a651a29

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
ExitThread
FindResourceA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
LoadResource
LockResource
RtlZeroMemory
SizeofResource
lstrlenA
Sleep
SetThreadPriority
ResumeThread
GlobalFree
CloseHandle
SuspendThread

user32

LoadIconA
MessageBoxA
GetWindowLongA
SendMessageA
SetClipboardData
SetDlgItemTextA
SetLayeredWindowAttributes
SetWindowLongA
SetWindowTextA
wsprintfA
CloseClipboard
DialogBoxParamA
EmptyClipboard
OpenClipboard
EndDialog
GetDlgItem
GetDlgItemTextA

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPause
waveOutOpen
waveOutGetPosition
waveOutClose
waveOutPrepareHeader

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE