520b68fdb96b3451b1c5ae6aa18488a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

520b68fdb96b3451b1c5ae6aa18488a8
Size

33KB
MD5

520b68fdb96b3451b1c5ae6aa18488a8
SHA1

7733607d197e3cb09e1ce485ff03f5ad09003ed3
SHA256

66c11b253379059d1ec187bd41012535c012caccb35cafebfa396982c7982078
SHA512

70329f5d9bd06b4d08c1cccb54bce93d8bb1096594868ec1fba33e6adfbcf9ca34f1f0225b412f8dff359a78a417184124097d6c8fa731dad1bbef97c4eb68cb
SSDEEP

768:WFwkpiY5B6mlBBPB86OC3lXhS1LjjNdD1hMe9a9H9+:WFvkclu6jw1Ldnl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
520b68fdb96b3451b1c5ae6aa18488a8

Files

520b68fdb96b3451b1c5ae6aa18488a8
.exe windows:4 windows x86 arch:x86

f8960d4836dc6d548ee4efadd8fe3486

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
MoveFileExA
VirtualAlloc
lstrlenA

user32

CheckDlgButton
FindWindowA
GetWindowLongA
SendMessageA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE