ad94483e5aa8a713d3841c037f3f723898fb63bb087385f0a15443f4c41bac62N | Triage

Sharing

General

Target

ad94483e5aa8a713d3841c037f3f723898fb63bb087385f0a15443f4c41bac62N
Size

50KB
MD5

ba3658471d27b87aa289c5118001fb60
SHA1

7e000633fd78d5fb6cd6e85cf017c7b2ad807500
SHA256

ad94483e5aa8a713d3841c037f3f723898fb63bb087385f0a15443f4c41bac62
SHA512

188d703101ce4b160557d4175ced77310df48cb4256672bd88df9ff45bb734c762ab5bdc3765ee5b99a7539654ab1e38756ce24756a49eb726ad9fc5b981522f
SSDEEP

1536:x0aiBzpzOXvtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsrSUFkn0z1ux9x:x0aCJUvtdgI2MyzNORQtOflIwoHNV2XG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad94483e5aa8a713d3841c037f3f723898fb63bb087385f0a15443f4c41bac62N

Files

ad94483e5aa8a713d3841c037f3f723898fb63bb087385f0a15443f4c41bac62N
.exe windows:5 windows x86 arch:x86

e7d364eb347c61452cbd2799200870ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
RegisterClassExA
CreateWindowExA
LoadBitmapA
TranslateMessage
BeginPaint
SendMessageA
EndPaint
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
KillTimer
SetWindowPos
DispatchMessageA
SetTimer

kernel32

GetModuleHandleA
GetCommandLineA
CreateFileMappingA
DeleteFileA
CloseHandle
GetLastError

gdi32

TextOutA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ