b480c3b6ea793474c145e309684728c8 | Triage

Sharing

General

Target

b480c3b6ea793474c145e309684728c8
Size

23KB
MD5

b480c3b6ea793474c145e309684728c8
SHA1

aef9a95aab781a00b1b250842dbca888358382f6
SHA256

eafec6aa4b31af600d733e0b6255b597bd68e1edc0292698be66da5c17febeba
SHA512

ea3b210e76405c95a959b414075f2530e3b1f6e798eb4e85cb73641c1646be50b5d3c1a4048cab98aa91dab7d210600d7df7357ac3b4788e72cdbdd2638bb48f
SSDEEP

384:Wnk+x9UaWN7kjGPqMyVqlWiCx0Q8rA+1LO+6G5:Wnp98qMyUnb7YG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b480c3b6ea793474c145e309684728c8

Files

b480c3b6ea793474c145e309684728c8
.exe windows:4 windows x86 arch:x86

0ff63874b00b23e275b34b2188e5329d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
GetModuleHandleA
GetTickCount
LocalFree

gdi32

GetTextExtentPoint32A
SetROP2
SelectObject
PatBlt
CreateSolidBrush
GetObjectA
GetStockObject
BitBlt
GetTextColor
SetBkMode
CreateCompatibleDC

msvcrt

__CxxFrameHandler
rand
_except_handler3
_acmdln
_c_exit
_exit
toupper
__set_app_type
_initterm
__p__commode
__p__fmode

user32

GetMessageA
DialogBoxParamA
EndPaint
TranslateMessage
LoadIconA
EndDialog
ShowWindow

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ