3628523f5baa6f0a78333870d1b2a298cc165b37861dee22d3416ab03c8bcb2dN | Triage

Sharing

General

Target

3628523f5baa6f0a78333870d1b2a298cc165b37861dee22d3416ab03c8bcb2dN
Size

44KB
MD5

c260d5772bed94054a7ab2953a2c1230
SHA1

b93b8226ffb40e9324f63f763a46f9166675270e
SHA256

3628523f5baa6f0a78333870d1b2a298cc165b37861dee22d3416ab03c8bcb2d
SHA512

8ff894648e6adec7731474fbff0330eeedce251284eff8a04936ffe0719b40e0b88e7ce0fdbfc2cd38fea1b6b604d9a07c159a5a69bbf1b6c6c9d15f9dabe359
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95WQX:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3628523f5baa6f0a78333870d1b2a298cc165b37861dee22d3416ab03c8bcb2dN

Files

3628523f5baa6f0a78333870d1b2a298cc165b37861dee22d3416ab03c8bcb2dN
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ