addac9a683b6f7906079f5087ce514cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

addac9a683b6f7906079f5087ce514cb
Size

165KB
MD5

addac9a683b6f7906079f5087ce514cb
SHA1

b12313f0fb8ba842b86366bf266ef183af3e548e
SHA256

e2163ebb53ed1dda2ffc284d12b6f471d35f12ead5b0670a9356ec53a470c60c
SHA512

dc4ff026a18c12e824d264a5052b2253560e871133a68748c18dab64d4adbc88b6a91fb2edd9714b77c43562aa2ae2bb0e4ee45569e30a827213d7c1224ceb31
SSDEEP

3072:Zfy/Vq+/+C/+TAUeqpKUHkGM3YvxVKq9l37C4OMnmu5:Ry/12C/Y3MP3YvxVZ37CL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
addac9a683b6f7906079f5087ce514cb

Files

addac9a683b6f7906079f5087ce514cb
.exe windows:4 windows x86 arch:x86

f3a27bee3755f94687c7ab5fd39dc57f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

LoadCursorW
MessageBoxW
RegisterClassExW
CreateWindowExW
GetDC
GetParent
GetWindowInfo
EndDialog

kernel32

lstrcpynW
HeapCreate
CheckRemoteDebuggerPresent
TlsGetValue
EnumResourceTypesW
InitializeCriticalSection
TlsFree
GetStartupInfoA
TlsAlloc
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ