23deab7b6e6a31082abb825994420cefdf36b79a26a1c5cadeb48a91fbceb47d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23deab7b6e6a31082abb825994420cefdf36b79a26a1c5cadeb48a91fbceb47d
Size

71KB
MD5

52947d08e21aa49aaf365543b5382d61
SHA1

1e3b33b804920ca0d7596fe00812caa6858e585a
SHA256

23deab7b6e6a31082abb825994420cefdf36b79a26a1c5cadeb48a91fbceb47d
SHA512

187b40316524aeed1f0914f68254a78831f94f4d0104c32ea2e4dcf6b858d7193690a9655b40876ee14b239a92954b97df0c93d03134c378b0d1548fe2509e3c
SSDEEP

1536:mUL/o7EjR2I0WtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsryrEgNYkkkcbZt:mq/5jMIPtdgI2MyzNORQtOflIwoHNV2l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23deab7b6e6a31082abb825994420cefdf36b79a26a1c5cadeb48a91fbceb47d

Files

23deab7b6e6a31082abb825994420cefdf36b79a26a1c5cadeb48a91fbceb47d
.exe windows:5 windows x86 arch:x86

a3e8b5e80d5f9f266119a4ac18211954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
LoadCursorA
DispatchMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FillRect
GetWindowRect
KillTimer
SetWindowPos
BeginPaint
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ