869be95e2c6000e8754347ed159a06208b9a202afa5ef90ad2838564d548195f | Triage

Sharing

General

Target

869be95e2c6000e8754347ed159a06208b9a202afa5ef90ad2838564d548195f
Size

39KB
MD5

95cac826638fbb525f0e5065d4c62421
SHA1

d95c87857eb9dfea56ee30a261e8176c8e6ab68b
SHA256

869be95e2c6000e8754347ed159a06208b9a202afa5ef90ad2838564d548195f
SHA512

28aafb6ffb81d151bbfcdeaaf97bf71402994d95881f6812feae321253eb9b063b2083162525465f60e5f6e67ddb90dcdc430b3c8770ee0f6853ec5aa5fd811a
SSDEEP

768:/8sJAnZCQBwuUuequfinJxnUeGRVkcQ4b:/8sMnlequfa/FGTvQ4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
869be95e2c6000e8754347ed159a06208b9a202afa5ef90ad2838564d548195f

Files

869be95e2c6000e8754347ed159a06208b9a202afa5ef90ad2838564d548195f
.exe windows:5 windows x86 arch:x86

bebb09386a571afa0122abf9bbfc7d32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
GetMessageW
TranslateMessage
DispatchMessageA
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
GetQueueStatus

kernel32

HeapAlloc
GetStartupInfoA
GetProcessHeap
GetModuleHandleA
HeapFree
CreateFileW
ReadFile

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
_XcptFilter
__p__acmdln

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ