59f9feb417db5a8f1891a9f4e51ad24457fd474f21a4294b2372a65b0d2d4949N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59f9feb417db5a8f1891a9f4e51ad24457fd474f21a4294b2372a65b0d2d4949N
Size

27KB
MD5

b486643e70f8e5839f83a5c1a0b6dae0
SHA1

2072f6eeeed9399dd4106db2f464d1142685cc13
SHA256

59f9feb417db5a8f1891a9f4e51ad24457fd474f21a4294b2372a65b0d2d4949
SHA512

6618851d8d3596867d5771964bb8ede792068602862dcf444e0b5e7f5a1f5baf89780a7a51a1239830e10c47d8c26060e6735d0c4843730fc872788018b336a6
SSDEEP

768:Rr9jcUKmGhQp9NvTqZxfVYtdgI2MyzNORQtvflIwoHNV2XBFV72BOlA7ZsUIijq:3jcUcW9NOZwtdgI2MyzNORQtvflIwoHS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59f9feb417db5a8f1891a9f4e51ad24457fd474f21a4294b2372a65b0d2d4949N

Files

59f9feb417db5a8f1891a9f4e51ad24457fd474f21a4294b2372a65b0d2d4949N
.exe windows:5 windows x86 arch:x86

cfc5f53a6c21bb1f053423ff3431d27e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
SendMessageA
GetMessageA
RegisterClassExA
PostQuitMessage
MoveWindow
MessageBoxA
LoadIconA
LoadCursorA
EndPaint
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

ExitProcess
lstrcpyA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineA
CreateFileA

gdi32

CreatePen
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ