ea7df70f9f28dac31d28e2bec0870b51cbd521c8a0f7e728627fa5a972ae227b | Triage

Sharing

General

Target

ea7df70f9f28dac31d28e2bec0870b51cbd521c8a0f7e728627fa5a972ae227b
Size

48KB
MD5

1241a07c645ca17fbbfdddc43dec0f63
SHA1

daa6786e260a4ddae0ed35b91d3d04e5bd38fd85
SHA256

ea7df70f9f28dac31d28e2bec0870b51cbd521c8a0f7e728627fa5a972ae227b
SHA512

b88edb9860d23811066c2b9c1ecedb3a781e5b5f18b159e6ac02316a0564c5e3478878a532f3bbd55c108042a360bd6a943048ecaba9497fbea21a1fc5cce89b
SSDEEP

1536:AOg0V7wdS0P79Jc78x+pu9fWWq53joCTfjR:AO/9wdV79JXMpu9fWWq53j7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea7df70f9f28dac31d28e2bec0870b51cbd521c8a0f7e728627fa5a972ae227b

Files

ea7df70f9f28dac31d28e2bec0870b51cbd521c8a0f7e728627fa5a972ae227b
.exe windows:5 windows x86 arch:x86

b05c854936e80ba3420f36ed569f7216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
CreateWindowExA
EndPaint
GetMessageA
LoadCursorA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
DispatchMessageA

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE