96dd3bfac9515ba9994b2d4323f06b70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96dd3bfac9515ba9994b2d4323f06b70
Size

177KB
MD5

96dd3bfac9515ba9994b2d4323f06b70
SHA1

ed850cfa22687688e52d93c91b9d836be64bd4c0
SHA256

6f19dc12392c1fb2235f93c2527c4c25f5499c714b9891baff4e947e8aa2e03a
SHA512

6b7655f2ae1591b5a637f4f6ab12b8db93d1c43283b5cff593e0809b04c88e2e5208bf4e46377604e3c00d234216cecdcbaf7b23f69949eaf5520e8aced0edd8
SSDEEP

3072:+g6RunIsAji3WhqUpVImTlj5IDoIUQpN2C6v2pTVb3BjsS:NMun0+3WhjVbTy2CJs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96dd3bfac9515ba9994b2d4323f06b70

Files

96dd3bfac9515ba9994b2d4323f06b70
.exe windows:4 windows x86 arch:x86

7dd490db2905d55bd3f033bcaf12d670

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FindWindowA
FindWindowExA
PostMessageA
SendMessageA

kernel32

CloseHandle
CreateFileA
ExitProcess
GetTempPathA
Sleep
WriteFile
lstrcatA

shell32

ShellExecuteA

Sections

.text
Size: 171KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ