abaa9fd2a311afb7d1318c48c3335eb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abaa9fd2a311afb7d1318c48c3335eb2
Size

6KB
MD5

abaa9fd2a311afb7d1318c48c3335eb2
SHA1

2468abde4fa0fbc33133e0657b5b23484f02f7f2
SHA256

7bf4483ea84d7dc35265fe72bfee31301fc25f5f1e659307900676d973478542
SHA512

54e643a05aa3279421fe855bfcf59b6463d876ff6941eb4de944f3497fb7398ad3e1e2b28a7e816b31f3879e1dcb8550ba045278fc8170ede5fae1c112e7b5a8
SSDEEP

192:fMNGD1eyeZqPwd+jHSmZQaw2rgoM7ehSVzUx:JD15eZqPwd+L/yaDrnM9zu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abaa9fd2a311afb7d1318c48c3335eb2

Files

abaa9fd2a311afb7d1318c48c3335eb2
.exe windows:4 windows x86 arch:x86

0ae741b125161410dad8e131a17c3b57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

msvcrt

wscanf
wprintf
wctomb
wcsxfrm
wcstoul
wcstombs

wsock32

WSASetLastError
WSAAsyncGetProtoByNumber
getservbyname
getsockopt
ntohs
rresvport

Sections

.text
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE