b912c7a355a49d7e6fb3cb9b6e615d21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b912c7a355a49d7e6fb3cb9b6e615d21
Size

160KB
MD5

b912c7a355a49d7e6fb3cb9b6e615d21
SHA1

8756c56f5065e260f9a957d6425e07f18bc3d9ec
SHA256

48455a3bee41a3e0738259a60c90a772ca42cc65cf29956cae750e0a691dc43a
SHA512

e9b116b41b21e89bde7f8edc82096b06f1553ef04abb79799ac2519be583e26d2684ba21d4ebc6c4d81ec9a2cdc72dfb8ddd57c0d4de32f27666c9015b465b7a
SSDEEP

3072:GeuglSCPTU15Y2Gh3hquglSCPTU15Y2Gh3hAVB8fkD:Luu6GV8uu6GVlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b912c7a355a49d7e6fb3cb9b6e615d21

Files

b912c7a355a49d7e6fb3cb9b6e615d21
.exe windows:4 windows x86 arch:x86

77c6ea429462573b1528d6f2087ce24e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcmpiW
GetSystemPowerStatus
GetSystemTime
lstrcatW
WideCharToMultiByte
lstrcpynW
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
lstrlenA
lstrcpyW
MultiByteToWideChar

user32

GetFocus
CopyRect
SystemParametersInfoA
SetRectEmpty
GetSysColor
GetKeyboardState
SetRect
SetFocus
IntersectRect

gdi32

GetRgnBox
CreateRectRgn

msvcrt

strlen
_controlfp
__set_app_type
__p__fmode
__p__commode
malloc
memset
_adjust_fdiv
realloc
memcpy
fclose
fwrite
_wfopen
memmove
memcmp
_except_handler3
free
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ