9069b7a0d4a20faea1e5c36298478bb4416772ec8c9ab8074204cfd8b839c7f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9069b7a0d4a20faea1e5c36298478bb4416772ec8c9ab8074204cfd8b839c7f5
Size

30KB
MD5

52a02810c3d88221685bfc888f540da4
SHA1

16fd844fe166924b37f612fdf09164292c489493
SHA256

9069b7a0d4a20faea1e5c36298478bb4416772ec8c9ab8074204cfd8b839c7f5
SHA512

36c3f2e1d781f944bdadb79cfa3e7eb906a943a1843c726ffc95ad82cc5dfa7129e1c4b0dac0eb55ef8f35b6c1aa1089cf10ab96521f8f729ae262b3008657b4
SSDEEP

384:cMNn5/Hkj5JhkMP+OijAA4cOYWO6O9OqeMUUVfTuEpr80/OUf7O5bXWXjbOtHnAr:v//O3+O54nUCfTuEpYEOc7OVWXKHLUT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9069b7a0d4a20faea1e5c36298478bb4416772ec8c9ab8074204cfd8b839c7f5

Files

9069b7a0d4a20faea1e5c36298478bb4416772ec8c9ab8074204cfd8b839c7f5
.exe windows:4 windows x86 arch:x86

a1cf36cd79e5415450a030bf00a43ed0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperW
CharUpperA
GetDlgItem
EndDialog
SetWindowTextA
SetFocus
CharPrevA
GetWindowRect
SendMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
GetMessageA
CheckRadioButton
GetWindowTextA
DialogBoxParamA
GetDlgItemTextA

kernel32

CloseHandle

comctl32

ord17

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ