59647fbcc1c67687b74582d45f78e5c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59647fbcc1c67687b74582d45f78e5c7
Size

392KB
MD5

59647fbcc1c67687b74582d45f78e5c7
SHA1

d35002161e049945ca0dcb387eda283a75adadaa
SHA256

f6b35b67279315b6ed56844b6656afc8e4d6a79fa9dc39233d9dbda1631bd9e0
SHA512

62ee3944d6087e8ef913d9840a50698b71c16c51e75fb2d04de220452b1b8f9ff5ea9e18f19a22d538a79abe524c8eeb1bb69558f6b31cee66a7d64a227eeb29
SSDEEP

12288:5J9GGmLdw5YRXnFb4iiXJo/VqiGFIG2oNwGNNB:b9GGEdwORVb4iiX2tzGyG2oXH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59647fbcc1c67687b74582d45f78e5c7

Files

59647fbcc1c67687b74582d45f78e5c7
.exe windows:4 windows x86 arch:x86

180f94db63c4887cbaac4d174cd58636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
LocalLock
LoadLibraryExA
CreateFileMappingA
GetConsoleAliasA
GetConsoleCP
GetLastError
GetACP
TlsGetValue
FindClose
WaitForSingleObjectEx
GlobalUnlock
CreateFileA
GetCalendarInfoA
FreeEnvironmentStringsA
Sleep
LocalFree
FindAtomA
HeapCreate

user32

DrawTextA
SetFocus
CreateDialogParamA
DispatchMessageA
GetMessageA
CascadeWindows
GetDlgItem
GetIconInfo
IsWindow
CallWindowProcA
GetDC
DefWindowProcA
DrawEdge
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BEREncFlush
ASN1BERDecCheck

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ