673181759dd4aa51ebc7e67484919b77e9899b9c196232573a1f0b29995a41c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

673181759dd4aa51ebc7e67484919b77e9899b9c196232573a1f0b29995a41c3
Size

21KB
MD5

9948d4d6c3ccfc4e2711ce192fdfacc5
SHA1

579a3ece7aa73705e48bd98840be22f56e897e1a
SHA256

673181759dd4aa51ebc7e67484919b77e9899b9c196232573a1f0b29995a41c3
SHA512

5fdbfa75bae9f2bf64fd48dab84d633bb6745baad5d3a1f9efc6a7aa0f930547528e1db6843708c7acae47ba8312c79107b0388782ab30f1d15bd2e30ee6390d
SSDEEP

384:udPon05k4XWjNwLnsNeC2RujHXRrs905INeZCFtejlIko5dN127BFVn2p4lAnZ8A:om05k4mjNmntC2ojHXRrs9sINeZEtejM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
673181759dd4aa51ebc7e67484919b77e9899b9c196232573a1f0b29995a41c3

Files

673181759dd4aa51ebc7e67484919b77e9899b9c196232573a1f0b29995a41c3
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ