b94b7796c5178ee7903439904bb4b6c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b94b7796c5178ee7903439904bb4b6c7
Size

293KB
MD5

b94b7796c5178ee7903439904bb4b6c7
SHA1

5a9b5c3f4046ec62fabdcf98af29f1bc8e765e7b
SHA256

34bd2a632bc6fee4ea3380dd3e6b42bdfdf078605d0ca8900b9a72570ded5e0f
SHA512

85514387951e1f8882f9944e3174e175f178658fcb3b59e4951169d8760db037fe3ebc85b50184d917647b6d72b18b3713c3e5a10402fea337afb30b09d3722d
SSDEEP

6144:Cc0GCbMBxi4H+q9bmzVlzUo0X5n5gsFZa:CgCbgxi4H+q9bmzVloo0pn5gog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b94b7796c5178ee7903439904bb4b6c7

Files

b94b7796c5178ee7903439904bb4b6c7
.exe windows:5 windows x86 arch:x86

beec8c1172a389fff755af4b31188290

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
GetCapture
GetScrollInfo
SetWindowTextA
EnumWindows

gdi32

GetArcDirection
DeleteObject
CreatePolygonRgn
GetRgnBox
GetRegionData

ole32

OleSetAutoConvert

comctl32

ord17

advapi32

IsValidSecurityDescriptor

kernel32

SetFileAttributesA
GetThreadLocale
HeapFree
GetDateFormatA
GetStartupInfoA
SetEndOfFile
LoadLibraryA
GetTickCount
FreeLibrary
GetProcAddress
HeapAlloc
IsValidCodePage
HeapCreate
GetEnvironmentVariableA
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
LocalFree
LocalSize
LocalAlloc

Sections

.text
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ