attempt1[.]exe | Triage

Sharing

General

Target

attempt1.exe
Size

60KB
MD5

e2d81e690932c5de174758f93540da7e
SHA1

654a9c61b13fc36bf8c47a872db195b14b1e97bf
SHA256

bad965751cb0761d7e63af37191d228d2b8499494853cab239032e021233f791
SHA512

35911cbeea603e927ae561f13e0475b92007d825af2c83e4790fab7b2f35ebc966b96223fdd7b328c55cce7614d06abb7a26d4442c8356470608c8d1faa28f24
SSDEEP

1536:nf8+vFgb42Bj5YlKkax316T/DBIMpUnL7:f89s2Bj5YlXil6rDBqL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
attempt1.exe

Files

attempt1.exe
.exe windows:4 windows x86 arch:x86

158424a205ce8b9bdaed8353a1df1bd9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendDlgItemMessageA
SendMessageA
GetDlgItemTextA
MessageBoxA
LoadIconA
DialogBoxParamA

kernel32

lstrcpyA
lstrlenA
LockResource
SuspendThread
RtlZeroMemory
SetThreadPriority
Sleep
ResumeThread
CreateMutexA
ExitProcess
FindResourceA
GetLastError
GetModuleHandleA
GlobalAlloc
GlobalFree
LoadResource
ExitThread
SizeofResource
lstrcmpA
CloseHandle
CreateThread

winmm

waveOutReset
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutClose
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ