a33c2100efc56c949f288e1c69f23c7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a33c2100efc56c949f288e1c69f23c7d
Size

136KB
MD5

a33c2100efc56c949f288e1c69f23c7d
SHA1

41989a389483d4631562147ad399850735e4eada
SHA256

754e9cd8ddf6c42dc8454bf47b1f61306af2c649003270d38db682f9d15eee80
SHA512

76b8469895f9beb009f33ee448a286cddf8d5c2871111a8ca18f9a3d12aadf944f247624ccacedd5f095d2254a638352e45ba9506e79673a159ca149dcb0bd97
SSDEEP

3072:S/nzUwQquXioSZQp2lTDaX5B8oeH5tToD3mK0hCcOo0:S/squbSZQp86X5BQH/y2Eb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a33c2100efc56c949f288e1c69f23c7d

Files

a33c2100efc56c949f288e1c69f23c7d
.exe windows:4 windows x86 arch:x86

d06686cf9c0c76b9d240e8d63fcf19c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

EnableWindow
DefWindowProcW

gdi32

CombineRgn
CreateFontIndirectA
CreateRoundRectRgn
CreateDCW
CreateCompatibleBitmap
CreateRectRgn
BitBlt

msvcrt

__p__commode
strcmp
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 806B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE