a221ee4a20b16035e4055abc305dd014 | Triage

Sharing

General

Target

a221ee4a20b16035e4055abc305dd014
Size

34KB
MD5

a221ee4a20b16035e4055abc305dd014
SHA1

fdaaac68513ccb649b6311b14cc52e34215271b6
SHA256

949b323b791186eaa26ec51d40c8647c37b8fba19deb82ce21d7318c3d85e843
SHA512

8bba5ef31a2c828391ba4ffa16c695d637de1c436427d60dda45e278cf655a6c494327203eb511aee1bfbcb0ceb394510dd00e7830faf8e8bb036fce76b22e1b
SSDEEP

768:lF+SSOksGZdUZRDYr4k9TOJCQpg0RuzoIVlD64j8G:0VOZRDY8k9TOJ/pgMV4jv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a221ee4a20b16035e4055abc305dd014

Files

a221ee4a20b16035e4055abc305dd014
.exe windows:4 windows x86 arch:x86

1a4f68363ac38fcf8ae88d8cb6e8c0d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc

user32

CheckMenuItem
GetCursorPos
BeginDeferWindowPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aspack
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ