436b1c6dbc22e37d1065ec699a798a9f4dcd9e6440be7236b4435a75b7fc76ff | Triage

Sharing

Copy URL Twitter E-mail

General

Target

436b1c6dbc22e37d1065ec699a798a9f4dcd9e6440be7236b4435a75b7fc76ff
Size

51KB
MD5

f475173d4d1407968752f948dcf234fc
SHA1

a3276f14872d65c266acc24280ff6b1d474e4e09
SHA256

436b1c6dbc22e37d1065ec699a798a9f4dcd9e6440be7236b4435a75b7fc76ff
SHA512

898b8cbc3c1cbb69f192477428baff451694ea5653403bca8cbc4d546ffa260b00908d2cb7dffe7be6f8d1f9536fef863919ffec4595835e465c387859384fb3
SSDEEP

384:UP2U4oY5XBZe0AC+wWgarhF7t4FYusambnD7skYSGqhvzN:UyB5XHBEwWgOhx+FYus1jspavR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
436b1c6dbc22e37d1065ec699a798a9f4dcd9e6440be7236b4435a75b7fc76ff

Files

436b1c6dbc22e37d1065ec699a798a9f4dcd9e6440be7236b4435a75b7fc76ff
.exe windows:4 windows x86 arch:x86

bd7b859f05f0a6fc90edae991f7ebd76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamW
GetDlgItem
RegisterClassExW
CreateWindowExW
GetCursorPos
MessageBoxW
ShowWindow
UpdateWindow
DestroyCursor
CreateCursor
SendMessageW
ShowCursor

kernel32

CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ