755a35a4abc4038b899d01de9ae45fa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

755a35a4abc4038b899d01de9ae45fa2
Size

636KB
MD5

755a35a4abc4038b899d01de9ae45fa2
SHA1

b2354a800fb5ff6bc8cd986c1b33725f3bf860bd
SHA256

beb51bcda28c4141efc884cfd0f90096c2b793f833d230eba35f69657519111d
SHA512

1f53532b02540dc49d27cd67585ae8f57b544c13fbe8365c92a438adf2448f5b2f267527d1297ee4395363a2034834c82277f06ac2d1a5d1c333617a4baec24d
SSDEEP

12288:Lj1yWFNcU2j2IK66uxQf0XCFo20551DfE2RRU/pGV44Vg69MwbO+kPzd1lHYi0mv:LjJFNcrj2INQf0XCypfE2fUkg6vbKd3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
755a35a4abc4038b899d01de9ae45fa2

Files

755a35a4abc4038b899d01de9ae45fa2
.exe windows:4 windows x86 arch:x86

f283642efd4a988463a77e27d7a67755

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCP
lstrlenA
GetCommandLineA
WaitForSingleObject
GetTickCount
GetSystemDefaultLangID
GetVersion
WaitForMultipleObjects
GetStdHandle
GlobalUnlock
GetConsoleCP
SuspendThread
CloseHandle
HeapReAlloc
HeapCreate
VirtualProtect
GetModuleHandleA
InterlockedExchange
GetAtomNameA
CompareFileTime
LoadLibraryExA

user32

GetKeyboardLayout
IsDialogMessage
DestroyMenu
GetKeyState
CreateMenu
DialogBoxParamA
GetCursorInfo
EnableScrollBar
DispatchMessageA
DrawCaption
CreateIcon
CopyImage
SetPropA
SetWindowPos
GetDlgItem
InsertMenuA
DragObject
FillRect
InvertRect
SetScrollInfo
FindWindowA

advapi32

RegCreateKeyExA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyA

apphelp

ApphelpCheckExe

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ