f939c8c4b43ef8a5fc76752b0f0709bb0d0e028b2b9b9548d32e92f09fcecc09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f939c8c4b43ef8a5fc76752b0f0709bb0d0e028b2b9b9548d32e92f09fcecc09
Size

57KB
MD5

7a19bd6db71db737877a77928877d760
SHA1

f2045da371021ce233dee44fdbbed834109b5066
SHA256

f939c8c4b43ef8a5fc76752b0f0709bb0d0e028b2b9b9548d32e92f09fcecc09
SHA512

7455585d7d62d3a01ba15992c04978546682503c99d51e65df6eaa78b5611d85579fa4d295be40f80b931051a2e6eb5a46f2eaf444214f0e4539585221fca99f
SSDEEP

1536:AkGjXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8nsTQtpsWME0YL78:mjXRrs9sINeZEtejlIkoLN127BFVn2pX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f939c8c4b43ef8a5fc76752b0f0709bb0d0e028b2b9b9548d32e92f09fcecc09

Files

f939c8c4b43ef8a5fc76752b0f0709bb0d0e028b2b9b9548d32e92f09fcecc09
.exe windows:5 windows x86 arch:x86

0472c674d7267dab79104d29a2a3058b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc

gdi32

LineTo
MoveToEx

comctl32

ord17

shell32

DragQueryPoint
DragFinish
DragQueryFileA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ