893bada1b9fad6bc9385d34948493617 | Triage

Sharing

General

Target

893bada1b9fad6bc9385d34948493617
Size

27KB
MD5

893bada1b9fad6bc9385d34948493617
SHA1

d76801a2ff77bffdc6bb1601ef99f00787247c71
SHA256

6a5cc67e09cd5edf1751a431c2167793d2fcf6474c888fc89a29d28b9fa7b409
SHA512

80e6f698677ac28aaf59ce96942a7268731875d35d70cd3fe90226f34f1c5a2159b33d0d489efb0efe01da9d1f79e7b0f3cc03a3d3a1c12c47a7997a7b8d0d8d
SSDEEP

384:5FyvULyQj0LeW0B8dgGkLyXXvoAjGSR3qZXjecDZ1tm:tyen8z9/oAjrRaZXjem1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893bada1b9fad6bc9385d34948493617

Files

893bada1b9fad6bc9385d34948493617
.exe windows:4 windows x86 arch:x86

cbb36468f94fdb7570e3f7b8ee6c6f95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleHandleA
LoadLibraryExW
CreateFileA
GetExitCodeProcess
CreateMutexA
GetPriorityClass
GlobalFree
CloseHandle
DeleteAtom
FindResourceA
TlsGetValue
lstrlenW
GetStdHandle
SetEnvironmentVariableA
SetLastError
HeapCreate
GlobalUnlock
VirtualQuery
ReleaseMutex

user32

GetDC
DispatchMessageA
CreateWindowExA
CheckRadioButton
GetDlgItem
DrawMenuBar
CallWindowProcA
SetFocus
FillRect
IsWindow
GetIconInfo
CreateMenu
DrawEdge

ntshrui

GetNetResourceFromLocalPathA
IsPathSharedA
SetFolderPermissionsForSharing
IsPathSharedW
GetLocalPathFromNetResourceA

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE