72a521f2b0ddaaa59309484b4bfb3d12 | Triage

Sharing

General

Target

72a521f2b0ddaaa59309484b4bfb3d12
Size

1.7MB
MD5

72a521f2b0ddaaa59309484b4bfb3d12
SHA1

e69e0a25dc17934b3f896b4e9d0ac0840fd22154
SHA256

99921fb8edac0527c0a7acef7e15b623d033f55750d85a204db2e86d11802738
SHA512

dd4b2f676ec752e6c8f0a2808d549af6825225a4b41c34ef02b57bf6a3be49d6156ed939bcf5f9d63705b52e656262e6190bfc0b7b9490d689b17a37733b8459
SSDEEP

49152:2gPI9yPhWP34R2qU8l3X8Uw8HNVEV3vyM:N7wPPqU8tX8Udv23vyM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72a521f2b0ddaaa59309484b4bfb3d12

Files

72a521f2b0ddaaa59309484b4bfb3d12
.exe windows:6 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 63KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zbnwtjmk
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lnkyifov
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE