590796d089ee598a05e4ecf154dbb98b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

590796d089ee598a05e4ecf154dbb98b
Size

37KB
MD5

590796d089ee598a05e4ecf154dbb98b
SHA1

a5d37610e6b7a8947dc932cffa6974b21f46744f
SHA256

0cdb932f91fd7b1dd71abfcc7f70e2a20e2fd1e0d8d5ba2771158f80d2e984bc
SHA512

385c3adef25b17f4a766636565073bc0821621ba840fbb3b3242d8d44a43b24113031ad74fd79a9405f1f43b1b07af70be032be305364e832cd560693150c33f
SSDEEP

768:D9OW/U9bR+HcTDlEekS59Htp9NaagBHJnBiGXhIzOUIZbN00+:DwW/U9bR+HcHlQSXHtJ5sFhWCy0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
590796d089ee598a05e4ecf154dbb98b

Files

590796d089ee598a05e4ecf154dbb98b
.exe windows:4 windows x86 arch:x86

7c31b1872d72e3e93c20301eac5f6add

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrcatA
GetStartupInfoA

user32

GetWindow
GetDlgCtrlID
SendMessageA
PostMessageA
GetForegroundWindow

msvcrt

__getmainargs
_controlfp
time
??2@YAPAXI@Z
strstr
_exit
_XcptFilter
_except_handler3
_acmdln
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 702B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ