1ac79d53640023e25655918c1f6a9b95f27ab27e9169780ebf653c824c136aa0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac79d53640023e25655918c1f6a9b95f27ab27e9169780ebf653c824c136aa0
Size

75KB
MD5

a13fb64eab13c9fe2c875dd236b98896
SHA1

0d907e29d80473f731239950ca35444d606e7a73
SHA256

1ac79d53640023e25655918c1f6a9b95f27ab27e9169780ebf653c824c136aa0
SHA512

5b5bf69d57a8dc475e89225b7a82039034da1d2e257df6448444278194bdd0a7436cba110886fc29748c3204ffd5b5e549014d83e2ac3b5d8d6de15fec9154f6
SSDEEP

1536:MD7DL7tc4108tdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsrYNkWLnxtVlnGMpS:MD7DLhNHtdgI2MyzNORQtOflIwoHNV2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac79d53640023e25655918c1f6a9b95f27ab27e9169780ebf653c824c136aa0

Files

1ac79d53640023e25655918c1f6a9b95f27ab27e9169780ebf653c824c136aa0
.exe windows:5 windows x86 arch:x86

5cdbf67e6579af610fcd31f176bbd81c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadCursorA
LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
FillRect
BeginPaint
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetDC
GetWindowRect
KillTimer
SetWindowPos
TranslateMessage
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ