723b98930b8e3bb892e1464d55cc47c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

723b98930b8e3bb892e1464d55cc47c4
Size

121KB
MD5

723b98930b8e3bb892e1464d55cc47c4
SHA1

c6c56911b240223f372394b0ee48d8775a3f65e2
SHA256

98597321f66d78ae974b3037a593dd64c3bf70ec9fb958387772bca73a6a4831
SHA512

750c52aa939e889b47b598c93ca49f67250115b6e02e2da896a45846f7d1becbac7e84542a4415c2a99bd3ed754ddf25b575b8a48ecb00251f68adf80e4c7743
SSDEEP

3072:TkK452nlxCq/IC3r5IGq5hFRZFKX6/QdR5ON1lmSbReH:TkKBlx3HJq5NKqI8lm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
723b98930b8e3bb892e1464d55cc47c4

Files

723b98930b8e3bb892e1464d55cc47c4
.exe windows:4 windows x86 arch:x86

0ec5f204f5eb9404adb966463ea8ecd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
CreateThread
ExitProcess
ExitThread
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
IsValidLocale
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQueryEx

msvcrt

fwrite
fseek
strcpy
atol
strncmp
wscanf

user32

RegisterWindowMessageA
GetCapture
DefFrameProcA
GetDesktopWindow

comctl32

ShowHideMenuCtl
InitCommonControls
CreateStatusWindowA

oleaut32

VarWeekdayName
VarI4FromI1
VarI2FromUI4
VarFormat
VarDecDiv
VarCySu
VarCyFromR8
RegisterActiveObject

Sections

.text
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ