75844b1ec2fea1e29ec2efa9332c34bd781ccd6ad462dd4cbeaf1fe00ee67de7 | Triage

Sharing

General

Target

75844b1ec2fea1e29ec2efa9332c34bd781ccd6ad462dd4cbeaf1fe00ee67de7
Size

28KB
MD5

d13a26afc90e9e050243e4a666f88976
SHA1

31e09c82ab2c705800a27221a6968de2318a12c9
SHA256

75844b1ec2fea1e29ec2efa9332c34bd781ccd6ad462dd4cbeaf1fe00ee67de7
SHA512

e6f2fc88263409e0cdab59acc55dfdf96c29233f25b009df9bd53bc1b0a1869cf391494443a31ce3d34fa9b06885da37db609df147a684978a48ace22e06d346
SSDEEP

384:AGNkzd6k6qeGOIuQt50yV3GQhn93MKguGikhscLIFxJEpAIgi:A+6lS4N3GQP3XLBgwx6pAli

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75844b1ec2fea1e29ec2efa9332c34bd781ccd6ad462dd4cbeaf1fe00ee67de7

Files

75844b1ec2fea1e29ec2efa9332c34bd781ccd6ad462dd4cbeaf1fe00ee67de7
.exe windows:5 windows x86 arch:x86

fe487be3ca290bea84564888c7619239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
EndPaint
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

CloseHandle
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
GetCommandLineA
ExitProcess
CreateFileMappingA
CreateFileA

gdi32

CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ