b54207a9136a17976a55e5b38c251076 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b54207a9136a17976a55e5b38c251076
Size

331KB
MD5

b54207a9136a17976a55e5b38c251076
SHA1

31e6e76814ceb2612638951a468ae43e5d341ac8
SHA256

2fef31cf2f018efe61095b29a13c6451b70210f7577ff8d08891ed3201a0359a
SHA512

17151d9b43ca0e7dcccc35fab952a40af20e1592d68af59a8c7732d6bcda5adea907c48b72c0d556423b04791ef2bed6e9e4671ae43beb77b2e491d5f0936af9
SSDEEP

6144:kZyBz3HYgGp99zN1qk/ok5qw86YmV8q87koDD7wIETRt9Lj5oCv318aooMg8i:kZGXYZFNbo4qw86YmVjDoD/JEBFT8Tcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b54207a9136a17976a55e5b38c251076

Files

b54207a9136a17976a55e5b38c251076
.exe windows:4 windows x86 arch:x86

b7b14d05900c7a1bcef71fd0ac1a4ad3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextLengthA
MessageBoxExA
SetWindowTextA
IsWindow
GetDialogBaseUnits
CreateWindowExA
DialogBoxParamA
EnumChildWindows

kernel32

GetStartupInfoA
GetModuleHandleA
VirtualAlloc
GetProcAddress
LeaveCriticalSection
HeapCompact
HeapAlloc
OpenSemaphoreA
GetOEMCP
GetNumberFormatA
GlobalReAlloc
DeleteCriticalSection

winmm

PlaySoundA

winspool.drv

AddPrinterConnectionW
DeletePrinterKeyA
AddPortA
DeviceCapabilitiesA
EnumMonitorsA
EnumPortsA
EnumFormsW
EnumFormsA
EnumMonitorsW
EnumPortsW

msvcrt

_acmdln
_XcptFilter
_exit
_except_handler3
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_controlfp
exit
__set_app_type
__p__fmode
__p__commode

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ