af9dd395f5eb2c3cd495bb89154537b141847b4879e5ea5dc9d277bc78ddcf10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af9dd395f5eb2c3cd495bb89154537b141847b4879e5ea5dc9d277bc78ddcf10
Size

243KB
MD5

b7e294e521903f00f3542da917c7a43e
SHA1

ae274c3c2b9e52bd8e253e4b5ae734baaa006c59
SHA256

af9dd395f5eb2c3cd495bb89154537b141847b4879e5ea5dc9d277bc78ddcf10
SHA512

c0e6b281358549a6b098c1595be91cf359166df395c009153248826babb92057b9e6e7eac258047681438467163b97577cfbc598b7b44790987ba52b70897c5e
SSDEEP

3072:qdJNz8NQQJsQdYCpB4sL/CzrtXlS41sBL5RhL8dVsA8iQPWpY:CVaKqptqftX041ECVEaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af9dd395f5eb2c3cd495bb89154537b141847b4879e5ea5dc9d277bc78ddcf10

Files

af9dd395f5eb2c3cd495bb89154537b141847b4879e5ea5dc9d277bc78ddcf10
.exe windows:5 windows x86 arch:x86

6a1b98995a4a71782f9c6f41799c76cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
VirtualAlloc
GetProcAddress

user32

LoadIconW
LoadIconA
LoadCursorA
CharPrevA
CheckDlgButton
CreateDialogParamA
DestroyWindow
DialogBoxParamA
DispatchMessageA
EndDialog
GetDesktopWindow
GetDlgItem
GetParent
GetWindowRect
IsDialogMessageA
IsDlgButtonChecked
LoadStringA
MessageBoxA
OffsetRect
PeekMessageA
SendMessageA
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetWindowPos
ShowWindow
SystemParametersInfoA
TranslateMessage

msvcrt

_cexit
_controlfp
exit
_acmdln

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ