eb9276d2ea1dc28664ed7996332c7588d058b2887de6872d5ac52139e1093655 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb9276d2ea1dc28664ed7996332c7588d058b2887de6872d5ac52139e1093655
Size

180KB
MD5

52e89178c954d016da0239607b58cc46
SHA1

98062f3017df472fb390d77f3816143e791c8381
SHA256

eb9276d2ea1dc28664ed7996332c7588d058b2887de6872d5ac52139e1093655
SHA512

dd4ec7fcd9bbd96d6aa8e3d362512801b0087f4a3d217142753db7faeee32634686389609276dc93717e933d1e9f65720958c5004417c552e91b04e4ed186cf3
SSDEEP

3072:090dssem0RGFXko4UD1Ug6B6s/55VwvBZrvh6yGkS2oRPBBDZhuE8LVw:B6sVx3d6B6ZZrvh2ff5X18LVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb9276d2ea1dc28664ed7996332c7588d058b2887de6872d5ac52139e1093655

Files

eb9276d2ea1dc28664ed7996332c7588d058b2887de6872d5ac52139e1093655
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ