1da903c3df848e43c1348a06403d79a0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1da903c3df848e43c1348a06403d79a0N
Size

27KB
MD5

1da903c3df848e43c1348a06403d79a0
SHA1

f7fcd6e76f34a7fe312055ee72d1dd30a3748e47
SHA256

340bf077910815eb08635718808d126e8e1bbdcb6770fa76aaa497e454d6bf5a
SHA512

9a283184af9968e444895de77b576002d584f236106a68580c2acdcf6fdbd261aa8f471722f15270d49a8a9581cfa6a22a2143be2ba8c2d786b606efe81bd10b
SSDEEP

768:Rr9jcUKmGhQp9NvTqZxfVYtdgI2MyzNORQtvflIwoHNV2XBFV72BOlA7ZsUIohq:3jcUcW9NOZwtdgI2MyzNORQtvflIwoHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da903c3df848e43c1348a06403d79a0N

Files

1da903c3df848e43c1348a06403d79a0N
.exe windows:5 windows x86 arch:x86

cfc5f53a6c21bb1f053423ff3431d27e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
SendMessageA
GetMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
LoadIconA
LoadCursorA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

ExitProcess
lstrcpyA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineA
CreateFileA

gdi32

CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ