96f34dc90b8dadae48dc2fe46550ceca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96f34dc90b8dadae48dc2fe46550ceca
Size

28KB
MD5

96f34dc90b8dadae48dc2fe46550ceca
SHA1

07a43c90fcd84048ab7ca2679a3bd88d309645fc
SHA256

069e2732b4a69546f160de2d4c05c74c683bf60cb59f38dc55398adca80a29a1
SHA512

f45a7b9a11933bb034424854a2990d3a0735930464255e516be21160a53070fdeab95064f2a74d0a8029799e3dddcd7dacc661f10dbe50a4b441419207ee4063
SSDEEP

768:GxuQnRqX7hadilUZAaQ8j53Tn/HME/BQT:GxuQnA4pCE5ruT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f34dc90b8dadae48dc2fe46550ceca

Files

96f34dc90b8dadae48dc2fe46550ceca
.exe windows:4 windows x86 arch:x86

3503f0e30203b93caebb6485d920bd79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcA
DestroyWindow
CreateWindowExA
PostMessageA
EndDialog
SendMessageA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DialogBoxParamA
DispatchMessageA

kernel32

GetProcessHeap
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
GetModuleHandleA
GetCurrentProcessId
GetCurrentProcess
CreateFileA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ