58ee32a3dd5d271bb37906befeffcfa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58ee32a3dd5d271bb37906befeffcfa1
Size

275KB
MD5

58ee32a3dd5d271bb37906befeffcfa1
SHA1

2b714cebbe6240ef314b9e1ee5021be983230ca4
SHA256

71f100f86069d02f5cbdb31d701df419b9342d83114abc6a116d03e4f7dec82e
SHA512

daffd8e3d14af606b288463b861d82dfa54a1b4c38acdedb6e7d5fcce9fc544abeeba54640e7e3d87158c919ee9e2d16a0897a0b07a7766ae9881e35cb999c53
SSDEEP

6144:bJqshkU+ms/32i1XaGwq9GtmstnNRGcw6+eEonFUU36ycVJDrZHs6VJ:bjhu32i1XaGl9GssxN9B+fonFBCXHZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58ee32a3dd5d271bb37906befeffcfa1

Files

58ee32a3dd5d271bb37906befeffcfa1
.exe windows:4 windows x86 arch:x86

a3bfbdf998e43ada5d46cccea4b71eca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumWindowStationsW
CreateDialogParamA
EndDialog
IsDialogMessageA
FillRect

kernel32

ExitProcess
GetCommandLineA
CreateThread
ExitThread

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ