f44f92c9d70c13ab1abc2dbdc058c0d70ca7c7721f9d9de0bd2ce61e823972be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f44f92c9d70c13ab1abc2dbdc058c0d70ca7c7721f9d9de0bd2ce61e823972be
Size

181KB
MD5

09af6497030acfeabf671a8e81394f6a
SHA1

c96005394f401029f2b417f2f4126a3639360db0
SHA256

f44f92c9d70c13ab1abc2dbdc058c0d70ca7c7721f9d9de0bd2ce61e823972be
SHA512

32cacd497238aa0c8695935b331b778f3b020c9dbafdbff5c6b748e2585799ed661f617aaa7c84344ffae1cce9e4adb273587bd088117bb6a045b25f15d9bae3
SSDEEP

3072:u90Mssem0RGFXko4UDPELjWqdYJoRPBBDZhuE8LVv:vRsVx3gtTf5X18LVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f44f92c9d70c13ab1abc2dbdc058c0d70ca7c7721f9d9de0bd2ce61e823972be

Files

f44f92c9d70c13ab1abc2dbdc058c0d70ca7c7721f9d9de0bd2ce61e823972be
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ