e748d20d6fe757fc945d5951e3b96cf1c5f5ceac55fc9fac0b0cc4b118193ef4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e748d20d6fe757fc945d5951e3b96cf1c5f5ceac55fc9fac0b0cc4b118193ef4
Size

26KB
MD5

9037acaeae9235fe205a912774007344
SHA1

a4331ccee512b9712e57e6a1cfc2fe2e34ab9d05
SHA256

e748d20d6fe757fc945d5951e3b96cf1c5f5ceac55fc9fac0b0cc4b118193ef4
SHA512

6d23ad5b2fa1f2ec44d1ab71bbbc130d7954730386db0525b49641ec853c375ea8479cef8961bff5da293c750ed51f99d0c66f9652aee20941212c8082523dff
SSDEEP

384:AGNkzd6k6qeGOIuQt50yV3GQhn93MKguGikhscLIFxJEpAyH:A+6lS4N3GQP3XLBgwx6pA6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e748d20d6fe757fc945d5951e3b96cf1c5f5ceac55fc9fac0b0cc4b118193ef4

Files

e748d20d6fe757fc945d5951e3b96cf1c5f5ceac55fc9fac0b0cc4b118193ef4
.exe windows:5 windows x86 arch:x86

fe487be3ca290bea84564888c7619239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
EndPaint
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

CloseHandle
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
GetCommandLineA
ExitProcess
CreateFileMappingA
CreateFileA

gdi32

CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ