730d9f74d7312a13a02a3ca2cb95a569 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

730d9f74d7312a13a02a3ca2cb95a569
Size

44KB
MD5

730d9f74d7312a13a02a3ca2cb95a569
SHA1

501061910df9a0037b9cfbd52a92da476555b45b
SHA256

b9e64880c906d975a7923917c6889ff779c3d6568d1c5b4872c86f0e4be5f5fb
SHA512

cd0ae2016cd2e6c7a4e193c6c87c47fe91d40b8c90353c8fc763fe4c63620c708bf776499deb7ab9d051010e7df7c262a44718a2e7bdf1cbeb20785b7f605e65
SSDEEP

768:KvhOg4alzz1f16/RUrjQVxqwpXXcxoXp4uIBSAPoX3Sc2r5bT2SnxA38kwVDnEOL:whOcnc6nkxqCXcGX7Ivcg4wlEOuoXC6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
730d9f74d7312a13a02a3ca2cb95a569

Files

730d9f74d7312a13a02a3ca2cb95a569
.exe windows:1 windows x86 arch:x86

fed9a48aab4a7249ec71b7ed0a884556

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
Sleep

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetClientRect
GetDC
GetMessageA
InvalidateRect
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassA
ReleaseDC
TranslateMessage

advapi32

LookupAccountNameA

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 750B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 550B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ