384a7a6b81a644a5a8114081bcee007d[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

384a7a6b81a644a5a8114081bcee007d.exe
Size

93KB
MD5

384a7a6b81a644a5a8114081bcee007d
SHA1

e9c0da9fece60bc414a8fd30a7c9ab628720968e
SHA256

4d117e4247b9edb909c448a413a5d49baed6c3ddbd82a61a4f66088074c3fba6
SHA512

5a49c4f4a1a0a722094c7b9ec1cbbd83e8489dffd2823535c615520580a65018fb0570aec276ac1f046d1166f816ceda8892d426bd4db14505073d20eb958cce
SSDEEP

1536:mZzhosA0+Q4bLtZOcIlQI2JIEHVpgXo2VBktjWcP6RwUu2U8iU5/0TzsLJWakr/h:e9DArQeLtQcIlQTJPkPkgcP6hu2UDU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
384a7a6b81a644a5a8114081bcee007d.exe

Files

384a7a6b81a644a5a8114081bcee007d.exe
.exe windows:5 windows x86 arch:x86

27154d7bae66ea19d9acd8b60198a0ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateMenu
DestroyMenu
CheckMenuItem
LoadIconA
LoadCursorA
RegisterClassExA
PeekMessageA
GetWindowLongA
GetCursorPos
DeleteMenu
BeginPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetMenuItemCount
GetCursor
EndPaint

gdi32

TextOutA
GetStockObject
DeleteObject
CreateBitmap
GetROP2
Rectangle

oleaut32

SafeArrayRedim
OleSavePictureFile

comctl32

ord321
ord13
ord320
ord325
ord322

kernel32

GetSystemInfo
LoadLibraryA
GlobalAlloc
GlobalFree
FreeLibrary
DeleteCriticalSection
LeaveCriticalSection
GetSystemTime
GetLastError
GetModuleHandleA
EnterCriticalSection
InitializeCriticalSection
GetLocalTime
GetCPInfo
HeapAlloc
HeapCreate
lstrlenA

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE