a9b90dbaa1144e1c3a8ba1a6049bcac0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a9b90dbaa1144e1c3a8ba1a6049bcac0N
Size

114KB
MD5

a9b90dbaa1144e1c3a8ba1a6049bcac0
SHA1

24e9a78d28a444c33da62c4149df5a436336fd87
SHA256

2e47521f821da1ba5fa472fd43358e8f5f1447df4743ab4210a6d025c652027b
SHA512

cfaccb54acff07399eec5d0a9495cf5248208aaf23cabcbbabfcdd8e361f0109d28257c9e708489e7a76966b7e9cb47b2945c27a85eaa073e2bde7be9151a3d6
SSDEEP

3072:Wrv/pZIgQWGEkT9oe2lxBYNtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+srS:Wrv/pZIgQWGEkT9oe2lxBUtdEI2MyzNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9b90dbaa1144e1c3a8ba1a6049bcac0N

Files

a9b90dbaa1144e1c3a8ba1a6049bcac0N
.exe windows:5 windows x86 arch:x86

2121fd23b453f538ab8eb2236aa5f534

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

FillRect
ShowWindow
SendMessageA
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
GetDC
GetWindowRect
UpdateWindow
SetFocus

kernel32

GetCurrentThreadId
GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
DeleteFileA
GetCurrentProcessId
GetCurrentProcess

gdi32

CreateFontIndirectA
BitBlt
CreatePen

Sections

.MPRESS1
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE