61635f26a7e542daf1e31bbfa9316f730f04d9fa5e72d7c9f3faa59f0fba04d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61635f26a7e542daf1e31bbfa9316f730f04d9fa5e72d7c9f3faa59f0fba04d6
Size

26KB
MD5

4d6d069679ccd4091295c24c73d09d26
SHA1

6ad7cab43734d53218d5220f216d8c9959baa568
SHA256

61635f26a7e542daf1e31bbfa9316f730f04d9fa5e72d7c9f3faa59f0fba04d6
SHA512

bfa17de692048330ef4f8792b78fde31b2636417d466f72ebe5394ec600686daeb338c0fb893c0fbc5cacfaeb88ea076b0e6bfefd3ab43469a5a4fab6f7f4b28
SSDEEP

384:Ih6KFEfaW4PeBkx0fc9t5rx/seYHuT5M+FyFm69DZV5kYDtNE/I:4GiWRkx0fc9tT0eYiFyFm69D9kYRNL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61635f26a7e542daf1e31bbfa9316f730f04d9fa5e72d7c9f3faa59f0fba04d6

Files

61635f26a7e542daf1e31bbfa9316f730f04d9fa5e72d7c9f3faa59f0fba04d6
.exe windows:5 windows x86 arch:x86

5f15908da5076b9866aa29d4bc303edd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetKeyboardState
PostQuitMessage
GetClassLongA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
HeapFree
SetFilePointer
WriteFile
ReadFile
CreateFileA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ