a93d511f5471b728b2b736cdb45f9e84118cf1742408d886746808bdeb2bf259 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a93d511f5471b728b2b736cdb45f9e84118cf1742408d886746808bdeb2bf259
Size

245KB
MD5

3fbba170dd7e52d1b77c3c0ee4fdec03
SHA1

c9197cc7c8b9dedc45c840ff9dfc4b5719a14158
SHA256

a93d511f5471b728b2b736cdb45f9e84118cf1742408d886746808bdeb2bf259
SHA512

cce3086e9d1f71a88a1a41779992d2e9a33d4c857103a64523e392d53bba767b070859c1296793ebcc2426eb5ccc53ae134b5de0a3a6bc2790c6f72c67b9b53f
SSDEEP

3072:qdJNz8NQQJsQdYCpB4sL/CzrtXlS41sBL5RhL8dVsA8iQPWp0:CVaKqptqftX041ECVEa0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93d511f5471b728b2b736cdb45f9e84118cf1742408d886746808bdeb2bf259

Files

a93d511f5471b728b2b736cdb45f9e84118cf1742408d886746808bdeb2bf259
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ