961b41b758f66906638e5f8605910f31558d8f2647cf25479d94e7509f1f7951 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

961b41b758f66906638e5f8605910f31558d8f2647cf25479d94e7509f1f7951
Size

35KB
MD5

fb806c4d6974757425d705710d9603f8
SHA1

2a250a28f69b2079f2afca88fb7292627ab947b0
SHA256

961b41b758f66906638e5f8605910f31558d8f2647cf25479d94e7509f1f7951
SHA512

08f424569859be98b67803406ba213e9417706c31dc8dcc117fa6544aa242aedd858d4d94ccc5b7e972665d3a4d55cc6a54b84a195768eeb7db14541c319fdcf
SSDEEP

384:lrd1jR3l1cbELnrfjoRWw32UcPykQtr/S53DDELZhAbRx5ISm/P5UPSGmTz19m:NvasrfjGW4xcPyzt25TALOi/PIIZg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
961b41b758f66906638e5f8605910f31558d8f2647cf25479d94e7509f1f7951

Files

961b41b758f66906638e5f8605910f31558d8f2647cf25479d94e7509f1f7951
.exe windows:5 windows x86 arch:x86

93f3c3f7fa917eec6b457a216663e185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
PostQuitMessage
DispatchMessageA
UpdateWindow
LoadCursorW
TranslateMessage
LoadBitmapA
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
LoadIconA
PostMessageA
GetClassLongW
SetWindowTextW
ShowWindow
GetKeyboardState

kernel32

GetProcessHeap
GetModuleHandleA
HeapCreate
HeapFree
DeleteFileW
CreateFileW
HeapReAlloc
SetFilePointer
WriteFile
ReadFile
HeapAlloc

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ