a04da803078f323397b2467ee353f7e1434fa1b6fdafd97d8d1cc301d0a3a6a3N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a04da803078f323397b2467ee353f7e1434fa1b6fdafd97d8d1cc301d0a3a6a3N
Size

170KB
MD5

e43cf2b49880d7b9dba289ff862abc30
SHA1

da07302618c5fe259622229fa64f9962f480b6c2
SHA256

a04da803078f323397b2467ee353f7e1434fa1b6fdafd97d8d1cc301d0a3a6a3
SHA512

b7aad0eabc04b003efb9f0f76a77bae6d36f333dccbdfab0056bfd5613735121e75cd98ddbcc8f8497dbf5f5cad874019de0526e9732a797ee9bba1460eb9000
SSDEEP

3072:joOEjRJWUTyKXLNIohqWhODJbod+sJFBJsJh7Q4H23XSZx3ONLP8:8Os/xNLNhhqWhODJbu+s9JsE9Yx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a04da803078f323397b2467ee353f7e1434fa1b6fdafd97d8d1cc301d0a3a6a3N

Files

a04da803078f323397b2467ee353f7e1434fa1b6fdafd97d8d1cc301d0a3a6a3N
.exe windows:4 windows x86 arch:x86

b7510919708ad292c0d1f09e68064c4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

user32

RegisterClassExW
GetDC
LoadCursorW
MessageBoxW
CreateWindowExW
GetUpdateRgn
GetWindowInfo
EndDialog

kernel32

FindFirstVolumeA
ProcessIdToSessionId
GetPriorityClass
TlsAlloc
EnumResourceTypesA
InitializeCriticalSection
TlsFree
GetStartupInfoA
TlsGetValue
GetFileType

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ