dac1c44ea5606745f0ee79f713d8df6d57063389f38c3f4492432f630ce6e800 | Triage

Sharing

General

Target

dac1c44ea5606745f0ee79f713d8df6d57063389f38c3f4492432f630ce6e800
Size

21KB
MD5

843f4b3412e38deda042abc3f1ecc295
SHA1

bc9f1a5914caf1b4431b3fb51cbb14a44938323e
SHA256

dac1c44ea5606745f0ee79f713d8df6d57063389f38c3f4492432f630ce6e800
SHA512

e79973a129fe94615a7c1663dc3295f731983d01bc9b1f6946fb17e82bde6c86dcca3872af5a799c83f3f2c062865baa219d20480e59e762833e7fc78f12c298
SSDEEP

192:ax1qR5c5Xupmg273D4GRQ4S4PhDBPYt/JQWRRssHgwlDL0/X:ax4eXupD273D42SihDB+JQWRRssHgnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dac1c44ea5606745f0ee79f713d8df6d57063389f38c3f4492432f630ce6e800

Files

dac1c44ea5606745f0ee79f713d8df6d57063389f38c3f4492432f630ce6e800
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ