95c38bab6952d88a953a3ed9566d4a8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95c38bab6952d88a953a3ed9566d4a8e
Size

45KB
MD5

95c38bab6952d88a953a3ed9566d4a8e
SHA1

30010f75a4b9374454672be1db599a420a61e457
SHA256

e99a875e8f1c7d739bf0c30af4ea35e1640a9e1c04a88ada457e593b8a7178d5
SHA512

6498da208589813e99c1f13110892366c259e0ef343fa47a4d740ec1872840492de9fb81928b41b43bd5e5dd49d97901f2ad5d713536f116997d5556faf5fea2
SSDEEP

768:X323i/5MqKWo+CBe0dyvumWGpgIZ/jjPFjwUMaJiApGHNb6mBD:Ii/5MtWo+C80UcGpR/jjPpaSiApGtWsD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
95c38bab6952d88a953a3ed9566d4a8e

Files

95c38bab6952d88a953a3ed9566d4a8e
.exe windows:4 windows x86 arch:x86

384e277b53ce1698862599704339634e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
InterlockedExchangeAdd
GetTickCount
GetCurrentThread
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
LoadLibraryA

user32

MessageBoxA
CreateWindowExA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
DefWindowProcA
GetActiveWindow
FindWindowA
GetCursor

gdi32

TextOutA
SetGraphicsMode
ResizePalette
GetBkColor
GetObjectType
SetBitmapBits
UpdateColors

ole32

CoInitialize

Exports

Exports

?jgdfgjfiogjfogE@@YAHHPADHHH@Z
?jgdfgjfiogjfogF@@YAHHPADHHH@Z
?jgdfgjfiogjfogG@@YAHHPADHHH@Z
?jgdfgjfiogjfogL@@YAHHPADHHH@Z

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ