a3f78c5d8936ae214c4100be14db6de0f886da573c174f76d264b0fb6d92902d | Triage

Sharing

General

Target

a3f78c5d8936ae214c4100be14db6de0f886da573c174f76d264b0fb6d92902d
Size

46KB
MD5

d66450e1c6fe1ec18ac3bbbbb37ef97d
SHA1

1c19c47f49e4efa0bf98114bf18eca26efcfb7c1
SHA256

a3f78c5d8936ae214c4100be14db6de0f886da573c174f76d264b0fb6d92902d
SHA512

74ba2976a0c34ffb55f76ceeb8ee5ccd0de835d1fb8a59bdc0373acae77178a09e51c5136baa7b2c317078541147200a05a255104567c9e2340f55eb4621c25f
SSDEEP

768:hkMDwAgjZgvCngjgPPotdgI2MyzNORQtOflIwoHNV2XBFV7JBDld7ZsBGWdaFrzE:9kAgjZeCgjvtdgI2MyzNORQtOflIwoHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3f78c5d8936ae214c4100be14db6de0f886da573c174f76d264b0fb6d92902d

Files

a3f78c5d8936ae214c4100be14db6de0f886da573c174f76d264b0fb6d92902d
.exe windows:5 windows x86 arch:x86

4af8dba28c3f384f880ddf5626b0fb67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
RegisterClassExA
CreateWindowExA
TranslateMessage
SendMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
DispatchMessageA
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindClose
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ