b57bac2667286af8e1e8c1170ac135b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b57bac2667286af8e1e8c1170ac135b0
Size

318KB
MD5

b57bac2667286af8e1e8c1170ac135b0
SHA1

4e06ae30102ac7764ec28c4d0e2f0adb4ca48ec3
SHA256

7ddb9d8aa4c91cee66e7a91bcb85b4b4ad413c9ebf622d2594a468291c1c8eac
SHA512

0e6ce99b51df32d62d6d02c92a937a8cfcbd0eeea4ca0ade540d19173b1b02c019baba0988cc3a5c0e0b42eda448c711f59990c194588d5eb785304b83c80aad
SSDEEP

6144:injO3j2+KE8TzZnheP5QFfwqpxE/CEIPMx7APnZ8tj:injOz2+p8Tzph85QKGYzkM6BGj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b57bac2667286af8e1e8c1170ac135b0

Files

b57bac2667286af8e1e8c1170ac135b0
.exe windows:4 windows x86 arch:x86

f5f06ad3f02fa0eb966365e62aa2698c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

LoadResource
GetProcAddress
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
LoadLibraryA
GlobalAlloc
GlobalFree
LockResource

comctl32

InitCommonControls

shlwapi

StrStrA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 299KB - Virtual size: 298KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE