976c3229b4ccd54b0295238883b7ea8e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

976c3229b4ccd54b0295238883b7ea8e
Size

244KB
MD5

976c3229b4ccd54b0295238883b7ea8e
SHA1

527144bc1abb3694f1219bf3b0e07dfe5fc65caf
SHA256

4e1ed9b43c88c2fb51aa6fb3d1990828863e00ae572ac88deaad96aba3fca54d
SHA512

99a94f398e58faabcc4130ef5ae8026372f3ff9b1e432c2a78e81b72a14acb5be71c245f97ca1742a9578cd7120454d3c9577f1bcf9427da65c27da320fda5cf
SSDEEP

6144:kQ/jV2uZ1x03/gkvFZSu+quRrKjY0mTz/U73AqhWRWr:1rEuVS5Qu+qOrYTmTz/UsJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
976c3229b4ccd54b0295238883b7ea8e

Files

976c3229b4ccd54b0295238883b7ea8e
.exe windows:4 windows x86 arch:x86

ac1eafa50f2c6d457f17b341d8f3e165

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
GetFileTime
GlobalAlloc
Sleep
TlsAlloc
GetACP

user32

GetSysColor
DdeInitializeA
IsClipboardFormatAvailable
LoadBitmapA
DeregisterShellHookWindow
OemToCharBuffW
EndDialog
MoveWindow
MapDialogRect
DdePostAdvise
ArrangeIconicWindows
keybd_event
CreateIconFromResource
OffsetRect

gdi32

GetTextExtentExPointW
GetCharABCWidthsFloatW
EnumFontFamiliesA
SetTextJustification

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE