4a48b8176de4fdf713ca073f9214174d779d4c9058bda4cdbd71afc002abab9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a48b8176de4fdf713ca073f9214174d779d4c9058bda4cdbd71afc002abab9f
Size

40KB
MD5

2c8749e930b041229bfecc08e443bf1c
SHA1

e0b6229e42043f2c902ea079387adbc2285f97d3
SHA256

4a48b8176de4fdf713ca073f9214174d779d4c9058bda4cdbd71afc002abab9f
SHA512

d82dacbb6402b570ead43013baf15fdaa976b960bd83fcde812b8d31efd9468b536c776a0a76a78987d57b174c3ed68db97d06cb965241f11c21b7d307dd8ac1
SSDEEP

384:kkju1dbvG8Qqrxiw39A9TMi8WXj6qPv1r8SleyKzGb74g3Lc23c51cmmbk28fVP6:hIC+ZGjnP9VKzO3H3c5fmbrMFggvQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a48b8176de4fdf713ca073f9214174d779d4c9058bda4cdbd71afc002abab9f

Files

4a48b8176de4fdf713ca073f9214174d779d4c9058bda4cdbd71afc002abab9f
.exe windows:4 windows x86 arch:x86

3a9c09fa738a6f8013500f35f9420e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ