898ff5567d3d35505827f207a6084076499cecdc6b7d08e46d3423a7df8fe09e | Triage

Sharing

General

Target

898ff5567d3d35505827f207a6084076499cecdc6b7d08e46d3423a7df8fe09e
Size

32KB
MD5

a4f1aa09d04498473138967a32f151ee
SHA1

0d00b4552326b3dbb81d954c66d1a82a3755f4cf
SHA256

898ff5567d3d35505827f207a6084076499cecdc6b7d08e46d3423a7df8fe09e
SHA512

8ff4bb26613ecaf654af0e8bfd6236a4fa9131db0b107c8a7ac12cf5caae3fa50c8e916117e454d04479b8efcd9d0a1c90f858c78738a81b38ae25ad59d68cf8
SSDEEP

384:sAI5y8tO/IgoM7cslMSa8AWpC81HMPQQQCH3oS97PeTL/oxFTSkuWmg:sAI5y4MnESa8AWoHnKv/2FWkJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
898ff5567d3d35505827f207a6084076499cecdc6b7d08e46d3423a7df8fe09e

Files

898ff5567d3d35505827f207a6084076499cecdc6b7d08e46d3423a7df8fe09e
.exe windows:5 windows x86 arch:x86

9bdeb3d243b47ce5aa03f899f7f8334d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageW

kernel32

CreateFileW
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetModuleHandleW
FindFirstFileA
FindClose
GetSystemTime
ReadFile
GetProcessHeap
CloseHandle
GetFileSize

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ