d198f5854df3674ce887f7992764724ce0078f7a163754bf4a6d41ea8ac0577a | Triage

Sharing

General

Target

d198f5854df3674ce887f7992764724ce0078f7a163754bf4a6d41ea8ac0577a
Size

47KB
MD5

482682747bbac0988a3e498b0885f77f
SHA1

6f45ade4d343dbdb86cf48e15199dda3c08b13f4
SHA256

d198f5854df3674ce887f7992764724ce0078f7a163754bf4a6d41ea8ac0577a
SHA512

e08e80756cd44b4a0b386fc7274b46f36bc5234cda39d4bfa4b544b2976d2600ef689c688a0bf20d484ee36057531dab4cd9e186d23f9c5cbfb117a33b5d08f1
SSDEEP

768:PXuk2ItF86gj/2S0mppSzKnladKNrlbJgFngWqQALtm7zku:PwVixkbnlOKNhlOnmLEZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d198f5854df3674ce887f7992764724ce0078f7a163754bf4a6d41ea8ac0577a

Files

d198f5854df3674ce887f7992764724ce0078f7a163754bf4a6d41ea8ac0577a
.exe windows:4 windows x86 arch:x86

bef15b6d6e736ad99d551c5b799de830

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamA
SendMessageA
SetFocus
GetMessageW
DispatchMessageA
EndDialog
GetDlgItem
IsChild
GetActiveWindow
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
MessageBoxA
GetDlgItemTextA

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
CloseHandle
GetTickCount
HeapFree
GetSystemTime
GetVersionExA
ExitProcess

comctl32

ord17

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ