91327d355006403a1a664abc0c16741050e3e4ec95f72b9aaa72a4ebe2118e30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91327d355006403a1a664abc0c16741050e3e4ec95f72b9aaa72a4ebe2118e30
Size

27KB
MD5

6abecfb44c31d558f127e39382bc5125
SHA1

4ff9bb21a29b519ee9b131d91f3fda102fb1adb9
SHA256

91327d355006403a1a664abc0c16741050e3e4ec95f72b9aaa72a4ebe2118e30
SHA512

cf4168caea33fa6e568efedcaf69a10300b819ee481122439acfdc75a3be5838deaa5721d75f0681e7976c831257d9c15be16b109a419df0e4fd24602dc6c291
SSDEEP

768:Rr9jcUKmGhQp9NvTqZxfVYtdgI2MyzNORQtvflIwoHNV2XBFV72BOlA7ZsUIoz:3jcUcW9NOZwtdgI2MyzNORQtvflIwoH/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91327d355006403a1a664abc0c16741050e3e4ec95f72b9aaa72a4ebe2118e30

Files

91327d355006403a1a664abc0c16741050e3e4ec95f72b9aaa72a4ebe2118e30
.exe windows:5 windows x86 arch:x86

cfc5f53a6c21bb1f053423ff3431d27e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
SendMessageA
GetMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
LoadIconA
LoadCursorA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

ExitProcess
lstrcpyA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineA
CreateFileA

gdi32

CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ