a69897c23c828b8960d2a93d046bd570N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a69897c23c828b8960d2a93d046bd570N.exe
Size

10KB
MD5

a69897c23c828b8960d2a93d046bd570
SHA1

63c3c3b4ce8997728afff3b5f03eb89f90f13516
SHA256

e7552c02289054113dfaf548cd8c960905629ea6409a1a7cd91d0f6d8a89374f
SHA512

18e812a0886935ac8bba8e2a1abde46fd1f92cf1dcb634b7f2ea447fbb097b89a4d647df14370e528aa6cb13e111bf825f957dd45b01b28efc9cab671c8ee210
SSDEEP

192:A5xGAGhnGvpULlamkv2i7vOI+1duILOXCuXDsOS:MlG5AOG73+1duILuXDP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a69897c23c828b8960d2a93d046bd570N.exe

Files

a69897c23c828b8960d2a93d046bd570N.exe
.dll windows:4 windows x86 arch:x86

246c20b97aa3ed3e25e2801c577b2749

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetPrivateProfileStructA
WritePrivateProfileStructA
lstrcpyA

user32

CreateDialogParamA
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItem
EnableWindow
wsprintfA
SetWindowLongA
SendMessageA

msvcrt

??3@YAXPAX@Z
_purecall
_strdup
_adjust_fdiv
_initterm
_stricmp
malloc
__CxxFrameHandler
sprintf
free
??2@YAPAXI@Z
atoi

Exports

Exports

ConfigAudio3
CreateAudio3
FinishAudio3
GetAudioTypes3
SetConfigItem

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ