4731236ba521cf1817f8c877b9775a10N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4731236ba521cf1817f8c877b9775a10N
Size

38KB
MD5

4731236ba521cf1817f8c877b9775a10
SHA1

eafba9428b534b149874de77aca5f83b70ce1f28
SHA256

b07092409ea3ddb7519139cb37cd6e8c5be64e26d76f1d448a50a4aa8ce717c0
SHA512

5e592516ddddb40009fbebad56a0d966a4fd7866d2bdf618707d22709a223f5cc584e039b0c4b59a57a11968bec47b0250418716c52ff947b6e8502b3318f867
SSDEEP

768:SeAaL04BLz72FTgIYYU08dEFr3bRktD/2JIfk:9AaL0407YAdFrLYKV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4731236ba521cf1817f8c877b9775a10N

Files

4731236ba521cf1817f8c877b9775a10N
.exe windows:4 windows x86 arch:x86

9e07083c3e91fb05e14984556f52f6d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
GetFileSize
lstrcpynW
lstrcpyW
ReadFile
CreateFileW
CloseHandle
HeapFree

comctl32

ord17

wintrust

WinVerifyTrust

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ