a13837b1ff2014dc44dfb97064092d8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a13837b1ff2014dc44dfb97064092d8a
Size

24KB
MD5

a13837b1ff2014dc44dfb97064092d8a
SHA1

4618efb3e4aab04833b5e6a74d114d36b9a2fea1
SHA256

2eeb290175741f7dfcd5f5bb865d270a4d3a98ee75e3b66502bd7c2f8882e5c4
SHA512

b1a7daea67bb32db5e7d570ff1a23597940bf553d702d695482f1043a6247d052dc32ac01ef20e2dd58767792443d7a329e5f170949c14942a32e9af83472e13
SSDEEP

192:1xCRyBGPqeP1oyn1rpEWUm7iyEvGfsMaExSK50cL5CP8:1xaQGPqI1r9VpsMgcLEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a13837b1ff2014dc44dfb97064092d8a

Files

a13837b1ff2014dc44dfb97064092d8a
.exe windows:4 windows x86 arch:x86

4b3f80383a4ceb0c0c5aa26814ca7181

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
SizeofResource
LockResource
LoadResource
CreateFileA
GetModuleHandleA
ReadFile
SetFilePointer
GetTickCount
FindResourceA
GetFileSize
GetStartupInfoA

user32

DialogBoxParamA
wsprintfA
MessageBoxA
SendDlgItemMessageA
CreatePopupMenu
SendMessageA
AppendMenuA
GetCursorPos
TrackPopupMenu
DestroyMenu
LoadIconA
GetDlgItem
EndDialog

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA

msvcrt

srand
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
rand
_controlfp
atoi

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ