a287c445d193d71a28e63136fa7c9779 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a287c445d193d71a28e63136fa7c9779
Size

17KB
MD5

a287c445d193d71a28e63136fa7c9779
SHA1

f7e4d01062b1b40b9c7f705d90cf0a9216698dd7
SHA256

3f195d712e6773b1d02241e8f421f5e17bd5576e591ef6291cf9848f2ab0cc1a
SHA512

5bef41fd9949bb82b84e65955ae3f01b0a9406f3234ec83555bdb5c45704a4b8ba89a1f2406cfc0b4b96a81db8cc4355477cbbc6042867386317a762cb3e55a1
SSDEEP

384:543OJZr/h0NXBiFtuBWN+8euEc4aHVI2gEHs:ee/Lh0hBqtta7cXm2vs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a287c445d193d71a28e63136fa7c9779

Files

a287c445d193d71a28e63136fa7c9779
.exe windows:5 windows x86 arch:x86

b029ded94fecb3f5f44b3058e2f0de10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
SetUnhandledExceptionFilter
lstrcatA
GetCurrentProcess
TerminateProcess
RtlUnwind
IsDebuggerPresent
CreateFileA
LoadLibraryA
GetProcAddress
VirtualAlloc
GetProcessHeap
UnhandledExceptionFilter
ExitProcess

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

PrintDlgW
GetOpenFileNameW
FindTextW
CommDlgExtendedError
ChooseFontW
GetSaveFileNameW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ