1eeb4a298d795ceb7abb2d574a8a7faa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eeb4a298d795ceb7abb2d574a8a7faa
Size

60KB
MD5

1eeb4a298d795ceb7abb2d574a8a7faa
SHA1

1ad56afcbfb827b90ef6ddd20187cd2d24c265a3
SHA256

812be79979045d37538af315ae7fe2f24aed16d5be0fb730c3b968eda5f2c867
SHA512

4771dc925f2170bedd1cc0f586791f9fa75b471571c3ce574743501c1b44008efd9c58052ab1d229e3e1962a12e8e6dad8e91ef3dea80c239e78c61fa392dc19
SSDEEP

768:0Ku7M8zlsD+I875NDdlTSXq1eQ3H4+FpR+nYBbfG:5IlsD+I875hEqRF99bu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eeb4a298d795ceb7abb2d574a8a7faa

Files

1eeb4a298d795ceb7abb2d574a8a7faa
.exe windows:4 windows x86 arch:x86

ca493c3ccf68b676fe34cfa87494e1a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
MessageBoxA
PostMessageA
DispatchMessageA
GetMessageA
SetScrollInfo
SetWindowTextA
EndDialog
GetDlgItem
DestroyCursor
ScrollWindow
CharLowerA
ShowCursor
TranslateMessage
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetStartupInfoA
CreateDirectoryA
GetModuleHandleA

gdi32

GetTextExtentPoint32A

comctl32

ord17

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE