a461d4db3cc4f3e1496048d1566401544e51bc6dc12b771daaa1bb34931f9011N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a461d4db3cc4f3e1496048d1566401544e51bc6dc12b771daaa1bb34931f9011N
Size

42KB
MD5

0bb8bc97666124348c9f1d3e1d6c6650
SHA1

be7c510b186f5014da31c9bda0007823fff8af4c
SHA256

a461d4db3cc4f3e1496048d1566401544e51bc6dc12b771daaa1bb34931f9011
SHA512

70908ff6b6f3b14adeba6ae6114f8ee771df388acaf56c2a15c0b772146b414810dc24f94c2115970bf64514b3272839d32894a22fa62a8b4b2e87873d0f2d59
SSDEEP

768:Y4VqN6B1syPDb5d3mOWDsKxlpv84t+4pa75udZRwE2G:06oypd3mOWDsKxlN84W75urRx2G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a461d4db3cc4f3e1496048d1566401544e51bc6dc12b771daaa1bb34931f9011N

Files

a461d4db3cc4f3e1496048d1566401544e51bc6dc12b771daaa1bb34931f9011N
.exe windows:4 windows x86 arch:x86

405884de03f1a4d257d3812157bfae8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
PostMessageA

kernel32

GetModuleHandleW
HeapAlloc
GetProcessHeap
FindClose
GetFileSize
FindFirstFileW
DeleteFileW
GetStartupInfoW
CreateFileW
FindNextFileW
SetFilePointer
ReadFile

gdi32

CreatePen

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ