d5bebf0d1ad0b0bdadec4f80847d2a50N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5bebf0d1ad0b0bdadec4f80847d2a50N
Size

45KB
MD5

d5bebf0d1ad0b0bdadec4f80847d2a50
SHA1

ee6fb93d01430414dd1ca2b4cc2205ab138009d2
SHA256

868613dd142369e1d83a7d94f6fa592f2136bb1408b9055ec821c3e8c506c40d
SHA512

8d04426c4da87e48529960c644e9c32452314b30633c757950781948c4c40b6ec5be8ea8fd38b80cb84802249f340af5fb87c937d1db98709841add3ae2fc255
SSDEEP

768:IY2vb9V6drHOYLES5LbyZWBxf6fVxKfO/arDYDWL32:52vb941RR5iZWLW/GDd6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5bebf0d1ad0b0bdadec4f80847d2a50N

Files

d5bebf0d1ad0b0bdadec4f80847d2a50N
.exe windows:4 windows x86 arch:x86

027c8da71649e190289924ac24ae7f72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
MoveWindow
BeginPaint
EndPaint
GetClientRect
PostQuitMessage
CreateWindowExW
RegisterClassExW
ReleaseDC
GetDC
DefWindowProcW
DrawTextExW

kernel32

CreateFileW
GetStartupInfoA
GetModuleHandleW

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spjenww
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ