44fbb6077b20e6f23fecb5ee94d5ec5ea96dab07249324579b88ff57a83dc4a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44fbb6077b20e6f23fecb5ee94d5ec5ea96dab07249324579b88ff57a83dc4a6
Size

49KB
MD5

bd00238b84edb028f7b0bb9d86b8025b
SHA1

50c652529d815404d67c54a902b882b59c7483a1
SHA256

44fbb6077b20e6f23fecb5ee94d5ec5ea96dab07249324579b88ff57a83dc4a6
SHA512

85caad0969b897be612341d9e583a5ca36edbe999b518e6438b618a746f12cf328722ea7034393fe328027eed35aae425d885e64ba69b697dcca01c7d292c3ac
SSDEEP

384:0KtkPx6aDM81/mCkJAD+ePkChLWv2JTq4xKYC1CTSXql79RUnYH3H/5z2t4ySBzT:0K27M81OsD+I8uNDdlTSXq1eQ3H4+2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44fbb6077b20e6f23fecb5ee94d5ec5ea96dab07249324579b88ff57a83dc4a6

Files

44fbb6077b20e6f23fecb5ee94d5ec5ea96dab07249324579b88ff57a83dc4a6
.exe windows:4 windows x86 arch:x86

ca493c3ccf68b676fe34cfa87494e1a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
MessageBoxA
PostMessageA
DispatchMessageA
GetMessageA
SetScrollInfo
SetWindowTextA
EndDialog
GetDlgItem
DestroyCursor
ScrollWindow
CharLowerA
ShowCursor
TranslateMessage
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA

gdi32

GetTextExtentPoint32A

comctl32

ord17

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ