a397438f92022749169de52e38f595b36f31c1a79fc1d0c1e8b8273a1a5dcd2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a397438f92022749169de52e38f595b36f31c1a79fc1d0c1e8b8273a1a5dcd2c
Size

30KB
MD5

0e5b798e38df40f80ebe1bbd13c2b793
SHA1

63fc544005144bfcea6ec9854a81566f9b90123c
SHA256

a397438f92022749169de52e38f595b36f31c1a79fc1d0c1e8b8273a1a5dcd2c
SHA512

5859515fc7dbd54cc8586e999b4d748e128b5ed6a1fe5f9ae74909f91f7cac161fd705b03f737e39cc7a1368f66678a74f4bb3d6acf2bcf7d9f61e54165bf075
SSDEEP

384:ykqRLh/m7m16W8ulDyaDoAQIFYouIY/kCh0rUxP5CVVoWEK:iLh+o6W8ulm1toaSUxEVoxK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a397438f92022749169de52e38f595b36f31c1a79fc1d0c1e8b8273a1a5dcd2c

Files

a397438f92022749169de52e38f595b36f31c1a79fc1d0c1e8b8273a1a5dcd2c
.exe windows:4 windows x86 arch:x86

5acac6125035772e14ee8f79396ad84a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SetWindowTextA
PostMessageA
GetDlgItem
SendMessageA
DispatchMessageA
GetMessageA
CreateCursor
DestroyCursor
ShowCursor
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
CreateDirectoryA
GetVersionExA
GetModuleHandleA

comctl32

InitCommonControlsEx

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE