8fdadb4f9550b168c69987d08f5b488f1427fd3987873983efc2415d5b8468ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fdadb4f9550b168c69987d08f5b488f1427fd3987873983efc2415d5b8468ec
Size

98KB
MD5

25fbc6b469605aaad435fc37164a6f40
SHA1

9f4b8ad5706be346cb1ff07f25e44d543b884f59
SHA256

8fdadb4f9550b168c69987d08f5b488f1427fd3987873983efc2415d5b8468ec
SHA512

5b67a30dc894fda59ee3e23671e5d39ac7ac8fd7812a5f85fdd19199cd8a5dd2074f1299fabb1939fd7121b29f05b957f76a64f92e8de5a68d5a2d9f24dc94a9
SSDEEP

1536:PwVi/hV2KpynwWWaMty99Qp2DZdCCKHDVffhshlrsRLzVevcH6R:PwVMV2bw+9Qp2DZAp+lrstO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fdadb4f9550b168c69987d08f5b488f1427fd3987873983efc2415d5b8468ec

Files

8fdadb4f9550b168c69987d08f5b488f1427fd3987873983efc2415d5b8468ec
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ