f1f7e117e49b2639b55673683d0dd41fd52767a0b0b75e7f8672f34c628ea0b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f1f7e117e49b2639b55673683d0dd41fd52767a0b0b75e7f8672f34c628ea0b7
Size

28KB
MD5

13d565f1d7cd18a16779280b76bd461f
SHA1

b9d2818caa4cc478da02c761297fb5e521f81e93
SHA256

f1f7e117e49b2639b55673683d0dd41fd52767a0b0b75e7f8672f34c628ea0b7
SHA512

87d255ebe9727489c9e84b682c5f7a5ab1b7a7dc3ad481660106f034b38b0e00d74b9e0e6ebefef2c96f0ba0b39b3bd0fc92881baefc260b0f7709b43a784814
SSDEEP

384:p7fwouSeFHt24nxRSOQsu7csOcSBZdRXIibaer/hvpKl9NVc:pk2wt1mj/2ZjXIibvhxKl9Xc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1f7e117e49b2639b55673683d0dd41fd52767a0b0b75e7f8672f34c628ea0b7

Files

f1f7e117e49b2639b55673683d0dd41fd52767a0b0b75e7f8672f34c628ea0b7
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ