676f986a74dfbe0187c7ddf092f2ada8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

676f986a74dfbe0187c7ddf092f2ada8
Size

352KB
MD5

676f986a74dfbe0187c7ddf092f2ada8
SHA1

10b0dbddd5551fe0caef5958a126d6ef75bad90e
SHA256

734159ca680f8d1d67694b05cd587988b4ef36a5822157865c43e22e8008f90c
SHA512

599412fb86d351ed190ef2fc8d4dc3d6725c5605ccab895fb56a6c3e705a11c6d9293c2b3b1442ce53ac30af0ae0c5ae6909574160e5bfa77e47de6ca9bf46ff
SSDEEP

6144:1tDyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/Xedk:byUuJbB5tNFX7B3JusP/Odk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
676f986a74dfbe0187c7ddf092f2ada8

Files

676f986a74dfbe0187c7ddf092f2ada8
.exe windows:4 windows x86 arch:x86

e45a749eb098d98847771676e1fa6ef2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
ResumeThread
CreateEventA
FreeConsole
FreeEnvironmentStringsA
GlobalLock
IsBadStringPtrA
CloseHandle
VirtualProtectEx
FindClose
OpenMutexA
LoadLibraryExA
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
SetFocus
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetComboBoxInfo
CheckMenuItem
MessageBoxA

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ