9976026e62bd17adcdded15c666943e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9976026e62bd17adcdded15c666943e3
Size

65KB
MD5

9976026e62bd17adcdded15c666943e3
SHA1

f69709eff0db07029538230e0439a707039081a4
SHA256

38bcde883fcd909626b9ed3dec600253dbfe83931558e55a5e741622e5903ea4
SHA512

a5bdf6530be1e666da106eb57d371922db2c94de20f83bac818e5f20a6a1391b98c6dc47346a96de0a9605ff975403d8828a67281ff9d39b0bb1e7347753e33e
SSDEEP

1536:2VvQFZ7Fxqlq+MLMRqyBpEJY9wee7j9rKXWI:2Vv2ZFxqMFyBpf9weev9rwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9976026e62bd17adcdded15c666943e3

Files

9976026e62bd17adcdded15c666943e3
.exe windows:4 windows x86 arch:x86

8ad7e1bb4e03663aea96bcf504aa6d25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GlobalUnlock
ReleaseMutex
LoadLibraryExA
GetModuleHandleA
lstrlenW
GetEnvironmentVariableA
UnmapViewOfFile
GetCurrentThreadId
CloseHandle
GetExitCodeProcess
HeapCreate
GetStdHandle
CreateFileW
FindResourceW
TlsGetValue
SetLastError
GlobalFree
CreateMutexA
lstrcpyA

user32

CheckRadioButton
GetDlgItem
GetCaretPos
CreateWindowExA
CallWindowProcA
IsWindow
GetDC
DispatchMessageA
DrawMenuBar
DrawEdge
FillRect
CreateMenu
SetFocus

rsaenh

CPDeriveKey
CPGenKey
CPHashData
CPSignHash
CPDecrypt

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 50KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gzfwrmd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE