974ca374c2f1c32bedefa2331d04024b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

974ca374c2f1c32bedefa2331d04024b
Size

89KB
MD5

974ca374c2f1c32bedefa2331d04024b
SHA1

3bb4499017c45ae548c078e6d8bf2760255226c5
SHA256

73cdd6d39406df738eb8b23a7b19b0ee4e05eeaa2c7beb5d6d0782d6d0882993
SHA512

660ef751e5805b967709f29520ac3fcae141c5351f9573609b63f4b2227818b42786c1cdd58c1e94a5ea3ac27c31f23fb44bc71649052b0712670d1f9c3e7d74
SSDEEP

1536:MAVj2DWyJazTCuiwrDtdaRKdT7OSqrnF/E0m:MIJzTCuHvawt7OSu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
974ca374c2f1c32bedefa2331d04024b

Files

974ca374c2f1c32bedefa2331d04024b
.exe windows:4 windows x86 arch:x86

c0d2b125e9f4ebdcf3105f26978384d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindResourceExA
ExitProcess
CreateThread
SetEvent
GetTickCount
GetCalendarInfoA
DeleteCriticalSection
TlsGetValue
GetDiskFreeSpaceA
VirtualProtect
GetModuleHandleA
ReleaseMutex
GetLastError
FindAtomA
FindVolumeClose
CloseHandle
lstrlenA
Sleep
SearchPathA

user32

EndDialog
CloseWindow
GetMessageA
DragDetect
DispatchMessageA
CopyImage
CreateMenu
IsIconic
GetKeyState
DialogBoxParamA
GetUpdateRect
CreateWindowExA
GetScrollBarInfo
EnableWindow

msdmo

DMOGetName
DMOEnum
DMORegister
DMOGetTypes
DMOUnregister

advapi32

RegCloseKey

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE