967ac63d8180139dda9450ed0f338ef2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

967ac63d8180139dda9450ed0f338ef2
Size

216KB
MD5

967ac63d8180139dda9450ed0f338ef2
SHA1

bc94bfdb0f71c36ed70539b8c834b1b38e68e15c
SHA256

af74d0f0cca1fd859de9d31cb605c7ac062d80d3fb53b2d86fe2032124e879a0
SHA512

d89db8edf6e8ef367926f275c1f832bccbeb51645ff184cbbc931e05d128ab465b772316a2cb21e07d80322d2cd0508caf34da5b7cfe19c9a2def19b0ecdf0b3
SSDEEP

3072:xpqCC+mTKP2AafsutmPPuKt0TqpcY0vHuW7jaCaQRICL/L6yqkRbusr+:XQ+mT81utmXETpYUaChZSyqkp1+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
967ac63d8180139dda9450ed0f338ef2

Files

967ac63d8180139dda9450ed0f338ef2
.exe windows:4 windows x86 arch:x86

49ef3fd68d8082afb69d946e8eface3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
ExitProcess
GetTickCount
FreeLibrary

user32

RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
SetTimer
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ