a0f61768ad0b2506ada7b0a0540372a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0f61768ad0b2506ada7b0a0540372a3
Size

119KB
MD5

a0f61768ad0b2506ada7b0a0540372a3
SHA1

3773590ac1003ac34faea9a28f8e2b2c83debcee
SHA256

8dd166728453228bd5b15c44321f958874e592bd9d90782600e6104852e215ad
SHA512

e48b29e80e36e60658dc413c5613cb89fd665d53a36b96ac81cd8c536aa98b599e4aac55865a644054dbce5eb2475e000797e7641381958ed9e36332cfaf486b
SSDEEP

3072:5ru8XZTd/D0SA9DMRda2qLZxZyJTYZlL:48XZT5gQKF/yJTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0f61768ad0b2506ada7b0a0540372a3

Files

a0f61768ad0b2506ada7b0a0540372a3
.exe windows:5 windows x86 arch:x86

d53d6b37add8df65642dea4ab6806702

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\test.pdb

Imports

kernel32

CloseHandle
CreateEventA
GlobalFree
SetEvent
GlobalUnlock
IsProcessorFeaturePresent
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
Sleep
GetTickCount
ExitProcess
CreateThread
lstrcmpA

user32

MessageBoxA
MessageBeep
ReleaseDC
GetSystemMetrics
GetDC
GetClientRect

gdi32

CreateCompatibleBitmap
SetStretchBltMode
CreateCompatibleDC
SelectObject
BitBlt
GetObjectA
GetDIBits
DeleteObject
StretchBlt

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ