93604b9c4e33a99f8b38e740acb29b259afb9a04eb6559fa12d95a855eda66d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

93604b9c4e33a99f8b38e740acb29b259afb9a04eb6559fa12d95a855eda66d4
Size

57KB
MD5

e13f54ae79b5d41eb127347035f8e045
SHA1

dd63dea9d01e7f4ecc97cfc4fdf3a305d4079063
SHA256

93604b9c4e33a99f8b38e740acb29b259afb9a04eb6559fa12d95a855eda66d4
SHA512

1fccc1f629780c47f510551f629264dab0df0303c78c7277198a7e5592449f321f324d7c129ca781ab564807071565a8eaa144975674f67de65a32a9a992bc75
SSDEEP

768:vDqYnMTOV5ZXO9o56McUyc8fHAl4MbPA9ScVOuuGMp0s3yKQBK:AOjXO2MMcUyc2XM89JuG+C4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
93604b9c4e33a99f8b38e740acb29b259afb9a04eb6559fa12d95a855eda66d4

Files

93604b9c4e33a99f8b38e740acb29b259afb9a04eb6559fa12d95a855eda66d4
.exe windows:5 windows x86 arch:x86

5038cc1d7d4ba6ce1ebcfec67b707138

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
IsBadReadPtr
LoadLibraryA
SetLastError
ExitProcess
FreeLibrary
GetModuleHandleA

user32

MessageBoxIndirectA
SendMessageA
DialogBoxParamA
GetDlgItem
EndDialog
LoadIconA

comctl32

InitCommonControlsEx

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ