f969cd4245eea84acf50aed6656f4f5df22b94b724130ea196721ef30442e467 | Triage

Sharing

General

Target

f969cd4245eea84acf50aed6656f4f5df22b94b724130ea196721ef30442e467
Size

19KB
MD5

ce4c0b76c5f987153e922371109f666a
SHA1

127a18034bf6cf37f27f638c93c2769bebe7ce40
SHA256

f969cd4245eea84acf50aed6656f4f5df22b94b724130ea196721ef30442e467
SHA512

2e1ff243cc4f8b70f0ee7356ee30a3c55438a612858fa071b1126f2cf8c947a3ee0869b7d53605494ba144439610a0e401353ec71f026473e8e8128913906ba8
SSDEEP

384:eZShTDJ8dD5XVgvlDhHvgu8PFVOntTuX4i4:Fr8KvlKPFVWtT2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f969cd4245eea84acf50aed6656f4f5df22b94b724130ea196721ef30442e467

Files

f969cd4245eea84acf50aed6656f4f5df22b94b724130ea196721ef30442e467
.exe windows:4 windows x86 arch:x86

881a59729119c8db81017b4e6573179d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetDIBitsToDevice
CreateHatchBrush

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetTickCount
SetUnhandledExceptionFilter
Sleep

msvcrt

_beginthread
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
__p__environ
memset
signal
vsprintf
__set_app_type

user32

DefWindowProcA
DispatchMessageA
GetDC
GetMessageA
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ReleaseDC
SetWindowPos
SetWindowTextA
ShowWindow
TranslateMessage
CreateWindowExA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE