bf90e1ceb94502bc6599704a4deb733adb404520f4972c4fb2ccba29d827505f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf90e1ceb94502bc6599704a4deb733adb404520f4972c4fb2ccba29d827505f
Size

181KB
MD5

6865a63c629bf9f3fc34695a7958db59
SHA1

6f2b8edb484872560968e648bde7d3fb3a5d8dd3
SHA256

bf90e1ceb94502bc6599704a4deb733adb404520f4972c4fb2ccba29d827505f
SHA512

fcdaceb743155b37af79b38a16b622cdd2ed9a52cb3316a7cc9d6ba6a87eaa957b21632c72e888afb76f973c96412ec8ee260592585e0117f46d02456a8a4b41
SSDEEP

3072:u90Mssem0RGFXko4UDPELjWqdYJoRPBBDZhuE8LVL:vRsVx3gtTf5X18LVL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bf90e1ceb94502bc6599704a4deb733adb404520f4972c4fb2ccba29d827505f

Files

bf90e1ceb94502bc6599704a4deb733adb404520f4972c4fb2ccba29d827505f
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ