de922729b3173bc54548c44fa718c759 | Triage

Sharing

General

Target

de922729b3173bc54548c44fa718c759
Size

13KB
MD5

de922729b3173bc54548c44fa718c759
SHA1

f30bf612666f6d939d6f34bc50e56953684e8265
SHA256

72da8421e9a504aaa30a83a4ea03445492ab8c1b7d20713f1a10e8134d675e07
SHA512

dcb88c3c65cca1194d073ae9cb6752be38117906052107a6df77d3a967b676987bc79eaf6790fccfe79661e1d53630568cc9f8291dc4234f4724386c19300d61
SSDEEP

192:22c1zRztZcFFt3QYf0+67O6PNlDcBoA4P7SafDsCIhoxkw2ik3:22cjOFt3QS2O2lm6Rkw2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de922729b3173bc54548c44fa718c759

Files

de922729b3173bc54548c44fa718c759
.exe windows:4 windows x86 arch:x86

e8b0ca786487298135a0b03730c9da80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
Sleep

user32

FindWindowA
SendMessageA

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 41B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE