04d7d43f35e0ba9827d227853b3bd27b9174b9d0b7fe198acafd19e6d508e357 | Triage

Sharing

General

Target

04d7d43f35e0ba9827d227853b3bd27b9174b9d0b7fe198acafd19e6d508e357
Size

631KB
MD5

6b03ec2903021ddd2a6b7f159dbc79b3
SHA1

89533c08c909480356267084c36b4bab14e14c74
SHA256

04d7d43f35e0ba9827d227853b3bd27b9174b9d0b7fe198acafd19e6d508e357
SHA512

3dc4846af1c78d69c0b95efe6eef337f4da882e8c2618015c397493f1c643de4bacee0dd1f1971071534c93235291c921857ec0e230250b3a110c6f0cbfc6d9b
SSDEEP

12288:TfPQ6Kv8fQfQiiSgG/gMt+L7di5ZxXRcSUeGX+e8xLSRWRG:06KOQ5iHG/guk7GXRcrOfRG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d7d43f35e0ba9827d227853b3bd27b9174b9d0b7fe198acafd19e6d508e357

Files

04d7d43f35e0ba9827d227853b3bd27b9174b9d0b7fe198acafd19e6d508e357
.exe windows:1 windows x86 arch:x86

3c962f692c5beb92fd79c36beb473c1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
GetCommandLineA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetBkColor
SetTextColor

user32

AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx

Sections

.data
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ