dcbd7cda9cc471484267f670d7e3db61ff23206257e43e21c43b64d029a593ae | Triage

Sharing

General

Target

dcbd7cda9cc471484267f670d7e3db61ff23206257e43e21c43b64d029a593ae
Size

36KB
MD5

48eac09ab83073fd9d5c8f7ead19ab95
SHA1

cbcaab353b8e84fed01b28c8fbdfb6e2132f8feb
SHA256

dcbd7cda9cc471484267f670d7e3db61ff23206257e43e21c43b64d029a593ae
SHA512

44b3e3ffee59f1666d5f3d579dc1dab25bb29446f70c9ac5f8a77c6b5b6b7aa60a2eac23fc7c0b27107917a0fe2f98bcbbbe0cc106aa913a2e8467871370e15e
SSDEEP

384:cKUDthWY/ANpYL3QVvSwBRcDgYCNXGQaI/I51Ee2m3wJp6R3IYsBl3VRBJ:SWTNyMhhvcgNWQBG1Ee/Mg6dTBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcbd7cda9cc471484267f670d7e3db61ff23206257e43e21c43b64d029a593ae

Files

dcbd7cda9cc471484267f670d7e3db61ff23206257e43e21c43b64d029a593ae
.exe windows:5 windows x86 arch:x86

1767080617bf8443c0422165e2b8ce4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
GetLastActivePopup
PostQuitMessage
BeginPaint
EndPaint
DefWindowProcA
CreateWindowExA
LoadIconA
RegisterClassExA
GetMessageA
TranslateMessage
DispatchMessageA

kernel32

GetCommandLineA
GetStartupInfoA
HeapAlloc
WriteFile
ExitProcess
GetFileSize
CloseHandle
GetTickCount
GetEnvironmentStringsA
lstrcatA
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetTempPathW
GetProcessHeap
CreateFileW
GetLocalTime
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

comctl32

InitCommonControlsEx

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ