c327f7ea48385e875d8a9fcc201bf8ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c327f7ea48385e875d8a9fcc201bf8ad
Size

27KB
MD5

c327f7ea48385e875d8a9fcc201bf8ad
SHA1

732d23f46b6ec1e4a90848a722630090bfb2493f
SHA256

cdd4658e5de760aa19079ad8394cca1b24f863830572a74e3a7e688c9a64b8a2
SHA512

0eda282305263ec6ec97f6b697c8d0e5cb44f4773de372ceef79a34def2681d67eb02f3fc1928e6fd1c5a066986e6457a1695db76aefbcc5af6d49813fd2101a
SSDEEP

384:dtJWarmw0ypZfld14ZN8lHUvmeNvtKVKLPJEm:3JWaiw0yppxb+pdtFLPJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c327f7ea48385e875d8a9fcc201bf8ad

Files

c327f7ea48385e875d8a9fcc201bf8ad
.exe windows:4 windows

0a2db8910f0bb042bc3d1e442021c2c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
_exit
__getmainargs
_initterm
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr

user32

wsprintfA
GetWindowRect
GetSystemMetrics
SetWindowPos
GetDlgItem
SendMessageA
SetFocus
TrackPopupMenuEx
GetClientRect
MessageBoxA
PostQuitMessage
DialogBoxParamA
SendDlgItemMessageA

kernel32

GetModuleHandleA
InterlockedIncrement
GetVersionExA
lstrcpyA
HeapCreate
HeapAlloc
GetCurrentDirectoryA
lstrcatA
HeapDestroy
ExitProcess
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStartupInfoA
InterlockedDecrement

gdi32

CreateFontIndirectA

comdlg32

CommDlgExtendedError

comctl32

InitCommonControlsEx

ole32

CoInitializeEx
CoUninitialize

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ