fb930b3cf9f6831e4848ed82e148580c4f65251a5769ce2cbdc4316ead444a36 | Triage

Sharing

General

Target

fb930b3cf9f6831e4848ed82e148580c4f65251a5769ce2cbdc4316ead444a36
Size

258KB
MD5

5e8a7be0e4d4dd4e2e1f26459f9caf7a
SHA1

765affa76f699b1d8ae8b97b8609a241694c2f60
SHA256

fb930b3cf9f6831e4848ed82e148580c4f65251a5769ce2cbdc4316ead444a36
SHA512

ba1820704bb0d7ccab00c8bb22ed4b1b85b0af7e4ef4d4fa2a78f70a9e847283c7bea71ae8785fd8d30861fc3fa0aa7277b0dac6174836bd36e98382a965781a
SSDEEP

6144:SNBn5rvqq1RqOXn6CRayuQFK2DYRn1oT/u8iYO:Sr5eI9n5RZtFLhxO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb930b3cf9f6831e4848ed82e148580c4f65251a5769ce2cbdc4316ead444a36

Files

fb930b3cf9f6831e4848ed82e148580c4f65251a5769ce2cbdc4316ead444a36
.exe windows:5 windows x86 arch:x86

139f244c37bdae29c099ea552dc12aa4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateFileW
lstrcatW
GetWindowsDirectoryW
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CheckDlgButton
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDesktopWindow
IsDialogMessageA
IsDlgButtonChecked
MessageBoxA
SetFocus
SetForegroundWindow
ShowWindow

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ