94bcda1d679289be3a1c1e9f4a67adae87cb37f73a14346e5a744729351bf7eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94bcda1d679289be3a1c1e9f4a67adae87cb37f73a14346e5a744729351bf7eb
Size

19KB
MD5

52287e2386ca9aba95174e7e9111f423
SHA1

6f8e11317fc6f1d90b4a345111a8c4fda3f45ec0
SHA256

94bcda1d679289be3a1c1e9f4a67adae87cb37f73a14346e5a744729351bf7eb
SHA512

4989729d68b61d4e9f47b3707d3247a055160e37084dd9854c7e9544f9de4a27fe16b6717b7b7803d91a68bee5ea533d885c3348949337afba5e0e2bee017b5c
SSDEEP

192:lrH0bTqpDNxjVD3l0Eu+X6b7VWLnrwmsSl7jaeYvLNpjRaw7oqKiUigHEJLNa:lrd1jR3l1cbELnrfjoRWw77KcgHCLNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94bcda1d679289be3a1c1e9f4a67adae87cb37f73a14346e5a744729351bf7eb

Files

94bcda1d679289be3a1c1e9f4a67adae87cb37f73a14346e5a744729351bf7eb
.exe windows:5 windows x86 arch:x86

93f3c3f7fa917eec6b457a216663e185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
PostQuitMessage
DispatchMessageA
UpdateWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetClassLongW
SetWindowTextW
ShowWindow
GetKeyboardState

kernel32

GetProcessHeap
GetModuleHandleA
HeapCreate
HeapFree
DeleteFileW
CreateFileW
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
HeapAlloc

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ