103c8782a2a64c3af45a8cfd93e684e2 | Triage

Sharing

General

Target

103c8782a2a64c3af45a8cfd93e684e2
Size

255KB
MD5

103c8782a2a64c3af45a8cfd93e684e2
SHA1

e652c33d62a9e1bc0cbee4cdd9d2df529dd582a6
SHA256

a6aabd2933686f10a1ebbd7d5713b931c5f7b2ac237d4bb023fa55b4f1309e30
SHA512

f7d3d2fcfb421e74b75b773f1b8e90571420e5533eddbd2cbe3983cc555377d5c9a2ec6fffb3f0c3e2009678460d9cbc19cb3ce19ef55ff4fed691e084d7c28c
SSDEEP

6144:ET1/g8+JxNc/VPGHgoyOAqsQ70RAJBAwUrOrh0IRuO:olMNuVPGDyOAqw+TAFqvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
103c8782a2a64c3af45a8cfd93e684e2

Files

103c8782a2a64c3af45a8cfd93e684e2
.exe windows:4 windows x86 arch:x86

77ddfd954c4f699ac989bd68ed408749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateFileA
GetLastError
GetProcAddress
GetTempPathA
LoadLibraryA
VirtualProtect
GetModuleHandleW
lstrcpyW
lstrcmpW
lstrcatW
CloseHandle
lstrcmpiW
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
lstrlenW

user32

GetCursorPos
SetFocus
LoadIconW
ShowWindow
LoadStringW
SendMessageW
wsprintfW
MessageBoxW

gdi32

SetWindowExtEx
SelectObject
DeleteObject
DeleteDC
GetStockObject
GetDeviceCaps

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 12B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE