84a4c64680d90c26f866b323e7c4e67bf2f800bf811d326d22e62062d8ff0bcf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

84a4c64680d90c26f866b323e7c4e67bf2f800bf811d326d22e62062d8ff0bcf
Size

35KB
MD5

2623f624ca93b8c0832384168ccd0d11
SHA1

031eccfd82ac1a63b17f07a064819442d2ec639a
SHA256

84a4c64680d90c26f866b323e7c4e67bf2f800bf811d326d22e62062d8ff0bcf
SHA512

423821072a4c30be54aba4d00b6257a8a0b09e6059bc8f04d14f0f2a3f440759fbdfd7dc14faf63803999a0d991248beb5c559af0a311d2e31820d113dd29270
SSDEEP

768:JVs952ISmO6v4soa5eOfl4ezZoS62iZhkK:w5ZRl4KT62Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84a4c64680d90c26f866b323e7c4e67bf2f800bf811d326d22e62062d8ff0bcf

Files

84a4c64680d90c26f866b323e7c4e67bf2f800bf811d326d22e62062d8ff0bcf
.exe windows:4 windows x86 arch:x86

1d5d0c5e86a07a6a5cfb325813c26d32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
SetWindowTextW
SendNotifyMessageW

kernel32

GetModuleHandleA
GetStartupInfoA
GetModuleHandleW
CloseHandle
CreateFileW
WriteFile
ReadFile
GetSystemTime

gdi32

SetBkColor

msvcrt

_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_exit
_XcptFilter
exit
__getmainargs

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ