dad9f5174d6b5ae8378435d1ad00d6d02380296dcecd891d760996de7915de98N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dad9f5174d6b5ae8378435d1ad00d6d02380296dcecd891d760996de7915de98N
Size

393KB
MD5

e5afbda466ac6e4b9aeb2852e49acd50
SHA1

f418ad91163fa9ea1c7c1c8ccc9bdaf21548dd0d
SHA256

dad9f5174d6b5ae8378435d1ad00d6d02380296dcecd891d760996de7915de98
SHA512

85c16de1f1c040775d9cfcc03b2549b643f3bee30fd1d954da8c357ca16b1bdd391b68b723b799193dfef87ab42131a7559d7d8b7c95d85be4bb155aadd21295
SSDEEP

12288:33KpJI6xj1dV9fJcEXW4OYIb5IiENCaVkZT:3Cb1dV9fJhXWGHNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dad9f5174d6b5ae8378435d1ad00d6d02380296dcecd891d760996de7915de98N

Files

dad9f5174d6b5ae8378435d1ad00d6d02380296dcecd891d760996de7915de98N
.exe windows:4 windows x86 arch:x86

718dbf6797c02ac0110316aaf7c54b48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetConsoleCP
GetLastError
CreateFileA
GetConsoleAliasA
FindAtomA
LoadLibraryExA
LocalLock
TlsGetValue
GetModuleHandleA
Sleep
CloseHandle
GetCalendarInfoA
GetACP
HeapCreate
WaitForMultipleObjects
FindClose
CreateFileMappingA
FreeEnvironmentStringsA
LocalFree

user32

CascadeWindows
DrawEdge
GetDlgItem
DrawTextA
DefWindowProcA
CallWindowProcA
DispatchMessageA
CreateDialogParamA
GetDC
IsWindow
SetFocus
GetMessageA
GetIconInfo
MessageBoxA

msasn1

ASN1BERDecCheck
ASN1BERDecSkip
ASN1BEREncLength
ASN1BERDecEoid
ASN1BERDecNull

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ