517c1d8abce0adb84d344e0efa7cf49ba7e770459e16947b86261a8499f525e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

517c1d8abce0adb84d344e0efa7cf49ba7e770459e16947b86261a8499f525e6
Size

35KB
MD5

76ef0c203431da158015aef3c5c39413
SHA1

8b2ddea8d8fa07bd472d42dddb6cf0f94bf7f9ee
SHA256

517c1d8abce0adb84d344e0efa7cf49ba7e770459e16947b86261a8499f525e6
SHA512

25eb8b94bf2920cf02ae93933815b1565f523751c15afab770cebee9223cc46e5e07f331ed493edd139716463ccb8b0744a28a20e57a790cbfb0ed2d01fd1832
SSDEEP

384:kkju1dbvG8Qqrxiw39A9TMi8WXj6qPv1r8SleyKzGb74g3Lc23c51sZXAmNv2t:hIC+ZGjnP9VKzO3H3c5mZXAmNvI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
517c1d8abce0adb84d344e0efa7cf49ba7e770459e16947b86261a8499f525e6

Files

517c1d8abce0adb84d344e0efa7cf49ba7e770459e16947b86261a8499f525e6
.exe windows:4 windows x86 arch:x86

3a9c09fa738a6f8013500f35f9420e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ