9933d400cbccb4fa8ecd25b750ef36b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9933d400cbccb4fa8ecd25b750ef36b8
Size

132KB
MD5

9933d400cbccb4fa8ecd25b750ef36b8
SHA1

463ba7328018c56b3718db14b92c065c340aa422
SHA256

f08ca2de0287ddb5a4db76a3a10ea4cf2ceb14e2d16f594b8b93830e55495b02
SHA512

473a60772e817ce4d20eecc9e9c297541113b0af9b61681f2f38451bc2ab01dd8526f607bf38373689792c81bf4b883191b8071306c46ba137e1763e93164ce4
SSDEEP

3072:OQ2IKH5HM58/n4fRAndX/c7cNaZB8jKf9jjpQDZtGBuc:Or3Zg8/w+dX/cwNYQKF/pMQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9933d400cbccb4fa8ecd25b750ef36b8

Files

9933d400cbccb4fa8ecd25b750ef36b8
.exe windows:4 windows x86 arch:x86

041a9f04025f54a839eff2c3300eb7f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
LoadLibraryA

user32

EnableWindow
GetDC
DrawTextA
CloseWindow
DrawTextW
FillRect
GetWindowRect
GetClientRect

gdi32

GetStockObject
CreateFontIndirectA

oleaut32

SysAllocStringByteLen

msvcrt

__getmainargs
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
strcmp
_adjust_fdiv
_XcptFilter
exit
_acmdln
_exit
_initterm
__setusermatherr

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 858B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ