ad38e91b2ed202bc0ae23035ee51fb04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad38e91b2ed202bc0ae23035ee51fb04
Size

173KB
MD5

ad38e91b2ed202bc0ae23035ee51fb04
SHA1

07f223ff9d5b72fe58e9bccd2e1ab92cbee20837
SHA256

5aa2f2158860120256ce029552fab45754ed2a1137a8a4f0929001825e69c1d2
SHA512

b24ccca2cfc174e88eee2ea27cfcf0b4944969931fb70de23e4de75bc17c744a279677f1d2e5b264cb1be0bc3978c3a0370c1014e323d9461074897cf4ba2f68
SSDEEP

3072:D+5vtcwxPg36vAWA3k373xejugPmw2uDL76aondrdckk0YM+uGhZ7VeE:DQcwJg3CdD373xeUcH76aodikk0YM+ub

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad38e91b2ed202bc0ae23035ee51fb04

Files

ad38e91b2ed202bc0ae23035ee51fb04
.exe windows:5 windows x86 arch:x86

aed874990c87be8527b57810a5a4c241

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

H:\JkrDgxe\dOseTsZDa\wjxyTldklz\xaXhhzBQN\shtBwtkeykE.pdb

Imports

shlwapi

UrlGetLocationW
ChrCmpIW
StrCmpIW

user32

wsprintfW
BeginDeferWindowPos
MessageBoxA
GetActiveWindow
RegisterClassA
GetWindowDC
SetMenuItemInfoW
IsCharUpperW
CloseDesktop

kernel32

LoadLibraryA
lstrlenA
HeapWalk
CreatePipe
GetModuleFileNameA
AddAtomW
GetDateFormatW
GetStringTypeExW
GetModuleHandleA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_wtoi
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
memset
_cexit
atoi
__setusermatherr
__getmainargs
remove
strncpy
fwrite

gdi32

SetDIBits
CreateBrushIndirect
CreateDiscardableBitmap
GetTextMetricsW
OffsetRgn
DPtoLP

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ort
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 142KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE