f0ca637293fe5b0f12a2e12cd0e0e5f2bf102b339e71f61ae1ded41313c2aacf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0ca637293fe5b0f12a2e12cd0e0e5f2bf102b339e71f61ae1ded41313c2aacf
Size

34KB
MD5

d5f2b1468acd3a12fc9cd9a8da8fd850
SHA1

f6b462fd2dc4a874b64f2a43e5cf3f28e214743d
SHA256

f0ca637293fe5b0f12a2e12cd0e0e5f2bf102b339e71f61ae1ded41313c2aacf
SHA512

f764f181682444113bbc3d04591bea4a254fa0fb923c7c4fa22df63b55ad06113862b1293765bfa5976708103b7f21ded34b33b787191397fd07e6345d5a58eb
SSDEEP

384:/kfug6zwgQP4J3390scAVVVccE08oMvK9rw1mA3U+BqdrdhP9dadR:cXYGtu1E08LC9ry0rdhlAR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f0ca637293fe5b0f12a2e12cd0e0e5f2bf102b339e71f61ae1ded41313c2aacf

Files

f0ca637293fe5b0f12a2e12cd0e0e5f2bf102b339e71f61ae1ded41313c2aacf
.exe windows:4 windows x86 arch:x86

cf17f374bd7a8f43d6e138239cb71808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
PostMessageA
MessageBoxA
EndDialog
GetDlgItem
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
SendMessageA
DestroyMenu

kernel32

GetModuleHandleA
CloseHandle
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ