460728b134d0989fff33ea58cd86563647dd8bcab58e47a6045f27a845d2029d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460728b134d0989fff33ea58cd86563647dd8bcab58e47a6045f27a845d2029d
Size

30KB
MD5

f0f84572b5ef16a6dbf0a4ffd0a07ee6
SHA1

168f440319ad81a6905ce5bb5335b7b97bdf4b2d
SHA256

460728b134d0989fff33ea58cd86563647dd8bcab58e47a6045f27a845d2029d
SHA512

5cad38ba491c581df94f981374eb11e52a433a480b9eee86b09bb26886438e27bfd4104019495122937f07a86ec39444843631cf70123e67f4f404a03f3394e7
SSDEEP

384:uX5vK5D78BwN/xrF8PMcYykmgIOPk91y6QYtyfW:uF8PAI/5qFgI2aQYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460728b134d0989fff33ea58cd86563647dd8bcab58e47a6045f27a845d2029d

Files

460728b134d0989fff33ea58cd86563647dd8bcab58e47a6045f27a845d2029d
.exe windows:5 windows x86 arch:x86

b271bce6a1e17ebf9ac5fcd3deb5ff90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
SendMessageW
CreateWindowExA
RegisterClassExA
SendMessageA
DefWindowProcA
GetFocus
EnableWindow
UpdateWindow
IsZoomed

kernel32

CreateFileA
HeapAlloc
HeapCreate
CreateFileW
HeapDestroy
ExitProcess

gdi32

GetStockObject

comctl32

InitCommonControlsEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ