718208fa14c13f0bc748e335363ad5bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

718208fa14c13f0bc748e335363ad5bc
Size

80KB
MD5

718208fa14c13f0bc748e335363ad5bc
SHA1

ba7ac57814839234b3f874c60c03ec2b2e139c17
SHA256

1eaff992d7a072666a4bf254bdac1e8405e536ab79b1017264ce471c0978573a
SHA512

3c70598fe83e34b255ffc837bab9b42bf9c28bc8c179681b68321543fbf79cf77c51372b006e846f4dc594989a36944cb808d9655217cd9d7d35ef04a2bba8be
SSDEEP

1536:4TjWXtiaLaa9Wa4v9H0p/A++E4McznQFqBvZ2aYx1JP20A8V5:K+iaeuWPv9Up/AfrUqhVYXIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
718208fa14c13f0bc748e335363ad5bc

Files

718208fa14c13f0bc748e335363ad5bc
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

a3dc189d70fbe60fd96f48ceea8cdbe9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
SendMessageA
MessageBoxA
GetDlgItem
SetFocus
DialogBoxParamA
SetTimer

kernel32

WriteProcessMemory
GetModuleHandleA
CreateProcessA
ExitProcess

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE