30bff2748c6625b33ad5748f03607fe83a5d741d42c4429627b097f860d59d3f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30bff2748c6625b33ad5748f03607fe83a5d741d42c4429627b097f860d59d3f
Size

45KB
MD5

3cb2097619598a2d22b0e40249daa66b
SHA1

0dac67308046a9d08db388f692b3d1addedb65a2
SHA256

30bff2748c6625b33ad5748f03607fe83a5d741d42c4429627b097f860d59d3f
SHA512

127b2af8196c8983ce467c61ace982b1dc78ca2f858398b8ae424ecf2102ab87ecf81076117b1692ac9233a25e53c05875fb428e68c69ad0a8888aa692af39d6
SSDEEP

768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMvcWp8EB0xxf:bc/y2lkF0+B2j8C0nf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30bff2748c6625b33ad5748f03607fe83a5d741d42c4429627b097f860d59d3f

Files

30bff2748c6625b33ad5748f03607fe83a5d741d42c4429627b097f860d59d3f
.exe windows:5 windows x86 arch:x86

78f4abb8610ca1c22ad9f81ecfabcc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
BeginPaint
DispatchMessageA
DrawTextA
CreateWindowExA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
LoadCursorA
SetWindowPos
GetWindowRect
EndPaint
DialogBoxParamA

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentDirectoryA
CloseHandle
GetCurrentProcess
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ