1d48174169ca601933a473310e3bae5628ae7d6e545b80dd035271241f40b189N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d48174169ca601933a473310e3bae5628ae7d6e545b80dd035271241f40b189N
Size

17KB
MD5

7281c04171f60a2845d8244b83c90300
SHA1

36cac91e89fb865974d734285762011d0077fc31
SHA256

1d48174169ca601933a473310e3bae5628ae7d6e545b80dd035271241f40b189
SHA512

f02583569aaefb438db8cc8ae51c455a90f62af4438a68b6fcac064ebad32183c5b0617488776cbce3f499be0d0293ae6b8c4ee6e289989ee5acd652caf8f113
SSDEEP

192:SRTQZOwUdXbg2+K+mBPu5wwKqlMJ7/+K+J3QUyqQ8888Lb8+nZ5LfH2kPdi+0J0q:WW5wwhuqL6hwqLUd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d48174169ca601933a473310e3bae5628ae7d6e545b80dd035271241f40b189N

Files

1d48174169ca601933a473310e3bae5628ae7d6e545b80dd035271241f40b189N
.exe windows:5 windows x86 arch:x86

3fdef2dd28500d2abff7710d2cb92e52

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SetCursor
SetFocus
MessageBoxA
GetDlgItem
TranslateMessage
DispatchMessageW
LoadCursorW
SendMessageW
DialogBoxParamW
SetCapture
GetWindowTextW
TrackPopupMenu
FlashWindowEx
TranslateAcceleratorA
GetKeyState
GetMessageW
GetDlgItemTextA

kernel32

GetModuleHandleW
HeapCreate
CloseHandle
GetVersionExW
GetCommandLineW
ExitProcess

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ