be0a429d0ed469bd6af956f45a38d6f0N | Triage

Sharing

General

Target

be0a429d0ed469bd6af956f45a38d6f0N
Size

24KB
MD5

be0a429d0ed469bd6af956f45a38d6f0
SHA1

363b47522e7c7851a09a452dc8d4dddf49df71aa
SHA256

0c60019c855ebbe31860209dc2c0d39a1b90f9fb91496293f055065f88e76d1f
SHA512

d01c06f4d33d2e83c6ae626b88c91361003a8dd269b759101d79adbb7399bb4ce83de7dacaf0a8fc8c7a27edf846fc23b1bcbcc4effcf108aabd2bef21d72fbd
SSDEEP

768:0ex2ZFuS3P4OjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oog+fGQ:0eqPjXRrs9sINeZEtejlIkoLN127BFVX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be0a429d0ed469bd6af956f45a38d6f0N

Files

be0a429d0ed469bd6af956f45a38d6f0N
.exe windows:4 windows x86 arch:x86

7763b13757a016b5cb5406899f818c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

ReadFile
GetModuleHandleA
GetFileSize
CloseHandle
VirtualAlloc
CreateFileW
lstrcpyW
GetStartupInfoA

wintrust

WinVerifyTrust

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ