c722b0da7fa9a5172bbfcf590e81b942 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c722b0da7fa9a5172bbfcf590e81b942
Size

15KB
MD5

c722b0da7fa9a5172bbfcf590e81b942
SHA1

59be8a6ecea7db8688be422193f27453b9881904
SHA256

fb5219ebe7479ce5aae6ad2f844df06ec7bec9151fe2e9d10dc887ad4ad24f83
SHA512

75d3cbf8d7dcaf53419530f9a94fd2d4727ca733330da2f291eb867728c9f077abdf50d64e02d8502075c54a860d6df2e84529862b72c86b8f9005d610a7528c
SSDEEP

384:buqNYaCh9zv89bIvPJP4C0OidsxaP9wdhrIsu4T:dmh6bUPJPh0hqk+rIs5T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c722b0da7fa9a5172bbfcf590e81b942

Files

c722b0da7fa9a5172bbfcf590e81b942
.exe windows:4 windows x86 arch:x86

8810a4269c841ce7b1fa565f9259d6be

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
LoadStringA
LoadIconA
LoadBitmapA
wsprintfA

kernel32

GetLastError
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
SizeofResource
CloseHandle
CreateFileA
CreateProcessA
CreateThread
ExitProcess
ExitThread
FindResourceA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1010B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ