868b376ad648205a4e3ce4307feeeef0 | Triage

Sharing

General

Target

868b376ad648205a4e3ce4307feeeef0
Size

68KB
MD5

868b376ad648205a4e3ce4307feeeef0
SHA1

17b6639a50aa6d900ebd608dce8539dc22f955af
SHA256

6699c28e381dfbdeb2f6d2ac60e00e519bc4dce4b8b4ad262e5e91200f588553
SHA512

68ee4e1c234f5fce22b50bf50fe9683b8337b28712b0a712d27ca590fc4bb5256c4e3be3172301fbc8d2a3a158e12dc73f8fb688f5c122fbb003c65997f761d3
SSDEEP

1536:zu4xuwGIyHSLQBldsN48c0T+NgYb3Ud1MPUAiXta5v:q4xuPIyPy4D0yOCMtgv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
868b376ad648205a4e3ce4307feeeef0

Files

868b376ad648205a4e3ce4307feeeef0
.exe windows:1 windows x86 arch:x86

1422cc437f85a8a0a5d7e79d074d7a4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
GetCapture
GetDlgItemTextA
GetForegroundWindow
GetMessagePos
GetTopWindow
IsWindowEnabled
PostMessageA
RemovePropA
TabbedTextOutA

kernel32

CreateFileA
EnumSystemGeoID
FreeLibrary
GetFileSize
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
ReadFile
SetCurrentDirectoryA
SetFilePointer
VirtualAlloc
WriteFile

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 22KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE