8d97fba109e0f23c19e5e50d85a4e7d05c35cfaa99068f291c7d682a270c7c5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d97fba109e0f23c19e5e50d85a4e7d05c35cfaa99068f291c7d682a270c7c5f
Size

66KB
MD5

65409d0e631305107cdb94ed1f984821
SHA1

4f473f7c53fb4bad676282ec9c3c12ee596c1a14
SHA256

8d97fba109e0f23c19e5e50d85a4e7d05c35cfaa99068f291c7d682a270c7c5f
SHA512

b66a91d8c3bc4df80d102a340ecb43dad2b56d8c2bf8a08bd60934a00f4d7b9449968ae0ba745da27a50683fd9f3da1118d4e1d53a116a03392152252d80a591
SSDEEP

768:sXuzKmOHnvgn+tOXRMFaIEj+POhVtMI3szUZNzxqcter8rqS+:u0K/vgn+tB94vDzIUTzxqc8cqS+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d97fba109e0f23c19e5e50d85a4e7d05c35cfaa99068f291c7d682a270c7c5f

Files

8d97fba109e0f23c19e5e50d85a4e7d05c35cfaa99068f291c7d682a270c7c5f
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ