d281ec8266f66c584f59ca60f84df682a2a1f71eb307c4062e5b399d254035b1 | Triage

Sharing

General

Target

d281ec8266f66c584f59ca60f84df682a2a1f71eb307c4062e5b399d254035b1
Size

49KB
MD5

2b235c9545417f86d7ecbd6b5ffc165d
SHA1

e7147b83fed1e565052dc04de0ed411c75698fa5
SHA256

d281ec8266f66c584f59ca60f84df682a2a1f71eb307c4062e5b399d254035b1
SHA512

027ca2b8ccfc6fc54e4ae8e9a125cd55c3cb19e2e4235c76f11a6d7d418e5e45b8d55324ad7b5678405e6e894bfbe6dde475a980a5baca42bdeea0b762c5df9c
SSDEEP

768:l2EMQWlqBxRlHzZN2zJo3LeivGnCoPToFr1t6nV86T:0lqBxRlHzZN2zSPvDoPTojt65

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d281ec8266f66c584f59ca60f84df682a2a1f71eb307c4062e5b399d254035b1

Files

d281ec8266f66c584f59ca60f84df682a2a1f71eb307c4062e5b399d254035b1
.exe windows:4 windows x86 arch:x86

e3ba6c037c9f90379e6d8a4d6f1fe2f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
TrackPopupMenu
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FlashWindowEx
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
GetModuleHandleA
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ