f210e244b5250409a9d0cdc365ea7d6afd516927d1c425a5fad17a902eda1776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f210e244b5250409a9d0cdc365ea7d6afd516927d1c425a5fad17a902eda1776
Size

32KB
MD5

7af0bf15dbc154a3274d3925bd26fdc4
SHA1

2fb0cccf23c912b4a0ee360640eff6f869724c0a
SHA256

f210e244b5250409a9d0cdc365ea7d6afd516927d1c425a5fad17a902eda1776
SHA512

f1751b49e1f945ce4dc4f57b51b5d418e99d9d67e3837792bdbcfabef96a2b58bfe7e501b5fce69492213a2e1b035dcbab5979c3c54122cc9048ed3eafcf803b
SSDEEP

192:aVb3RV16kB7vHtJUhctVoY5XBZeAf7AlC+mWgaA0UxCgmYTY:sPNU4oY5XBZe0AC+mWgarh0TY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f210e244b5250409a9d0cdc365ea7d6afd516927d1c425a5fad17a902eda1776

Files

f210e244b5250409a9d0cdc365ea7d6afd516927d1c425a5fad17a902eda1776
.exe windows:4 windows x86 arch:x86

bd7b859f05f0a6fc90edae991f7ebd76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamW
GetDlgItem
RegisterClassExW
CreateWindowExW
GetCursorPos
MessageBoxW
ShowWindow
UpdateWindow
DestroyCursor
CreateCursor
SendMessageW
ShowCursor

kernel32

CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE