950d86608e40d9b07d39ae52e3dbc180N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

950d86608e40d9b07d39ae52e3dbc180N.exe
Size

24KB
MD5

950d86608e40d9b07d39ae52e3dbc180
SHA1

0236ac52741a39e4d61762da247f49224b63175f
SHA256

cd95ae34dbc234d51a0fcce0dbff1f4283d84c4a06a3b0788fceb6959aa11bfa
SHA512

60e42a9aa223aa5f43ebc9179aa728ec37fb0dc9636e8f847682e8555a068843f6ddfb22786784df1ec2d8f3ca22419368ad6bf368343cfad88ccd67e03ca39c
SSDEEP

96:G8tY36Eq6ywrzDMYjur0AwdlCWfYzVKQlVC75dLLgshePgNifQHdT3nz:GnNqVJY6rKPCWfYzjPCthMYePOio9Tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
950d86608e40d9b07d39ae52e3dbc180N.exe

Files

950d86608e40d9b07d39ae52e3dbc180N.exe
.dll windows:4 windows x86 arch:x86

b3ece445382e6b72d680e2d9248abb5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

cdlli31

ord517
ord207

comctl32

_TrackMouseEvent

user32

DefWindowProcA
BeginPaint
SendMessageA
EndPaint
GetClassInfoA
GetParent
SetWindowLongA
GetWindowLongA
CallWindowProcA
DestroyWindow
UnregisterClassA
RegisterClassA
GetPropA
RemovePropA
SetPropA
CreateWindowExA
ScreenToClient
GetCursorPos
SetRectEmpty

msvcrt

_adjust_fdiv
_initterm
malloc
free

kernel32

GlobalDeleteAtom
GlobalAddAtomA
lstrcpynA

Exports

Exports

TTAddToolEx
TTDeleteTool
TTGetStatusText
TTGetTipText
TTHasStatusText
TTHasTipText
TTIsTool
TTSetStatusText
TTSetTipText

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ