b96c133241e3e812deb66e7d730f7549 | Triage

Sharing

General

Target

b96c133241e3e812deb66e7d730f7549
Size

58KB
MD5

b96c133241e3e812deb66e7d730f7549
SHA1

dbd22174f0e897fab1adcbc7bf076749b1582c99
SHA256

8510b6bfaa226b225958737e1d8aa11ba2e534a7415172b546d597b0fe306657
SHA512

6baf413385b0336026f77a2721aeda24e258fd0b11f0abaa722afbd69e4f68822df12dbd2a1245069aaa3e0cd69f5ca0e201949aedef2d080955947542e353b2
SSDEEP

1536:/Az3hjAMn5rRP/V3/bMuVOvyP0cziueqLWc/3IdGzzTliw:/r05rZt3/bMzqleHcyGjlV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b96c133241e3e812deb66e7d730f7549

Files

b96c133241e3e812deb66e7d730f7549
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE