a177464d0f0f37868fb313fea93a7991 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a177464d0f0f37868fb313fea93a7991
Size

393KB
MD5

a177464d0f0f37868fb313fea93a7991
SHA1

66a6e7a0fd26fc3d656ea7cb0d5b80a98460098e
SHA256

09af4be15a9b07b1e50fe964f7879569fa4d4b9ac663b587be2bac99ad03d64b
SHA512

ec66f413b880059e24b50a7977f295aabb4115d95aa0725cf3ea4f8ae6f36c84df183615f23fa1216cc8323ad352829e447dbe345305535324f844f51ad7623c
SSDEEP

12288:UxzBAG3KpJI6xj1dV9fJcEXW4OYIb5IiENCaMZ1:Uxz2GCb1dV9fJhXWGHNa1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a177464d0f0f37868fb313fea93a7991

Files

a177464d0f0f37868fb313fea93a7991
.exe windows:4 windows x86 arch:x86

ef6428cb96186b8a3ae1babc9d3ff687

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GlobalUnlock
CreateFileMappingA
GetConsoleAliasA
CreateFileA
LocalFree
GetLastError
TlsGetValue
GetACP
GetCalendarInfoA
FindClose
GetModuleHandleA
FindAtomA
CloseHandle
GetConsoleCP
FreeEnvironmentStringsA
LoadLibraryExA
HeapCreate
WaitForMultipleObjects
LocalLock

user32

IsWindow
DefWindowProcA
DispatchMessageA
CallWindowProcA
CascadeWindows
CreateDialogParamA
GetIconInfo
GetDlgItem
GetMessageA
GetDC
SetFocus
DrawEdge
DrawTextA
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecEoid
ASN1BERDecNull
ASN1BEREncLength
ASN1BERDecSkip

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ