8015931dde444b206666fa02c3e4b967 | Triage

Sharing

General

Target

8015931dde444b206666fa02c3e4b967
Size

315KB
MD5

8015931dde444b206666fa02c3e4b967
SHA1

0451a53a3625b10ab52b750c88a7c2e1558280b3
SHA256

518b5fce0881c96abf3f71662adc0d0cdf6dec12e1be5caa6be6110120c56325
SHA512

3017791094c5fe4086053ae6d55bffc99f1a96a0ee8c5241880e7ed0be3b6dd5afc064e258988adfa865e63cd08c8b89da1a34a51c7b7f146a7e4e62f4a73f71
SSDEEP

3072:8EdX67djyrcGFQSzAQHtN4JIpRP7wN1DKNIPAVRHDTJILVtcxK1UT1TCRu9VDZ1n:8UuiFQSz9HtN4KmNYRCLVZ1Up2Rq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8015931dde444b206666fa02c3e4b967

Files

8015931dde444b206666fa02c3e4b967
.exe windows:4 windows x86 arch:x86

2b421c01d198c39f573f396b0c8ddba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA

comctl32

InitCommonControls
GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 295KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE