914d7d805375ec1f4c202ad78e90c91cd711fed9c89627df5878cddc9462a29d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

914d7d805375ec1f4c202ad78e90c91cd711fed9c89627df5878cddc9462a29d
Size

183KB
MD5

8d4be1fd6d35e79d11a557a279af6b04
SHA1

187ea111fa4b20e988896d2500cd1e5b481a2ee2
SHA256

914d7d805375ec1f4c202ad78e90c91cd711fed9c89627df5878cddc9462a29d
SHA512

ffb8729348ee78f11b4f7726ea5203b1982fb73451193741546e615f3441221793ceb9fc1ed44eb431782c864f4185f482db7cc5fcfe7438ae8313a723b69f41
SSDEEP

3072:6wxPlpDVfFQI2+o/lHBo7QemfNAqpMBmIyp/mLevqbpiTa:LxtaIQ6vgjVm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
914d7d805375ec1f4c202ad78e90c91cd711fed9c89627df5878cddc9462a29d

Files

914d7d805375ec1f4c202ad78e90c91cd711fed9c89627df5878cddc9462a29d
.exe windows:1 windows x86 arch:x86

d781f385bb69deee17c87a89f010b9a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
GetModuleHandleA

user32

GetDlgItem
GetDlgItemInt
GetWindowLongA

crtdll

__GetMainArgs
exit
raise
signal

ulib

??0FLAG_ARGUMENT@@QAE@XZ
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ
??0ARRAY@@QAE@XZ
??0ARGUMENT_LEXEMIZER@@QAE@XZ
?Initialize@ARRAY@@QAEEKK@Z
?Initialize@ARGUMENT_LEXEMIZER@@QAEEPAVARRAY@@@Z
?SetCaseSensitive@ARGUMENT_LEXEMIZER@@QAEXE@Z
?PrepareToParse@ARGUMENT_LEXEMIZER@@QAEEPAVWSTRING@@@Z
?Initialize@STRING_ARGUMENT@@QAEEPAD@Z

ntdll

RtlFreeHeap

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 317B - Virtual size: 317B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE