ec9567274aad5ae86e4f420dc0ee05e8d5fd64a88295f2c10f3aa251266061eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec9567274aad5ae86e4f420dc0ee05e8d5fd64a88295f2c10f3aa251266061eb
Size

41KB
MD5

8ec694cd829e99d5ddc996a95e07ef5b
SHA1

ef3f183221a761f64c95fcb60683e25d04c5f856
SHA256

ec9567274aad5ae86e4f420dc0ee05e8d5fd64a88295f2c10f3aa251266061eb
SHA512

761eff4af0eb1a5651c137160e67319bc2f08998def8f616f29c3c2fc8ff5c62c0985060f31aef518c143a905ceb71517aeccd3c6b374babccdb61f81bba11ca
SSDEEP

384:/kfug6zwgQP4J3390scAVP9IhX7Q/alFg+7NcCsiSf1iW3wKj394mkZLSRCkOT:cXYGtuGh55BxSdtwmejkOT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec9567274aad5ae86e4f420dc0ee05e8d5fd64a88295f2c10f3aa251266061eb

Files

ec9567274aad5ae86e4f420dc0ee05e8d5fd64a88295f2c10f3aa251266061eb
.exe windows:4 windows x86 arch:x86

cf17f374bd7a8f43d6e138239cb71808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
PostMessageA
MessageBoxA
EndDialog
GetDlgItem
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
SendMessageA
DestroyMenu

kernel32

GetModuleHandleA
CloseHandle
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ