058db6c8eb1cae5cb14f39873efda2d8fd97d5051aa87def55defce7f9a67196 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

058db6c8eb1cae5cb14f39873efda2d8fd97d5051aa87def55defce7f9a67196
Size

48KB
MD5

74008a3a962bf4b7d3ba455a2d7feb63
SHA1

5c80a6969449e6ab8dbdf1a5069298d92d75b14b
SHA256

058db6c8eb1cae5cb14f39873efda2d8fd97d5051aa87def55defce7f9a67196
SHA512

b473e8b25f0069b4b1766dab9f14406ffc5463f1d9c327944d48aedbf9085172c10f302953d93e2a7284ff7c2da160d8789dbddf2e65def7c041cfdedf6f2fd9
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6CrpZJ7X:dCoVXGRTuhBxj/hH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
058db6c8eb1cae5cb14f39873efda2d8fd97d5051aa87def55defce7f9a67196

Files

058db6c8eb1cae5cb14f39873efda2d8fd97d5051aa87def55defce7f9a67196
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ