5a1cdf417749fde4cdcfc3e5c5d0c98f8cf853a01630323b803757112b36561f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1cdf417749fde4cdcfc3e5c5d0c98f8cf853a01630323b803757112b36561f
Size

181KB
MD5

be613205e4310208dbc303a4214e917c
SHA1

31b3aba47f26c595a9de5f1e1d01ee7d9811106e
SHA256

5a1cdf417749fde4cdcfc3e5c5d0c98f8cf853a01630323b803757112b36561f
SHA512

c395b556664d2c17e950b70054e26dfdfaa95ff59ef54a666df7e57d87c227dbc5902805af73d3049bb66558bfabc1f6085356a583ca511a593d1d00f6bb1316
SSDEEP

3072:u90Mssem0RGFXko4UDPELjWqdYJoRPBBDZhuE8LVz:vRsVx3gtTf5X18LVz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1cdf417749fde4cdcfc3e5c5d0c98f8cf853a01630323b803757112b36561f

Files

5a1cdf417749fde4cdcfc3e5c5d0c98f8cf853a01630323b803757112b36561f
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ