87a2e1261b790a95044c084c72b975344cf7e02be5528b90612ac24889fd797aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87a2e1261b790a95044c084c72b975344cf7e02be5528b90612ac24889fd797aN
Size

43KB
MD5

e46a8a4a8297f4bc221b34f9728ef2c0
SHA1

c328f886622a9b7d7d3d431ac9bea65a6ca73949
SHA256

87a2e1261b790a95044c084c72b975344cf7e02be5528b90612ac24889fd797a
SHA512

77f468a4c06f6bf5af7c62e4ab5bf17957f45eb63e885e96b111838b3cfcb41fd4e6a04ec948fd8a29bd2bd1ad0b6fac119889e81ced79082be49fa14cbbba8b
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaac4HK/wSvuQTCyD/95K:X6QFElP6n+gJQMOtEvwDpjBsYK/fbDFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87a2e1261b790a95044c084c72b975344cf7e02be5528b90612ac24889fd797aN

Files

87a2e1261b790a95044c084c72b975344cf7e02be5528b90612ac24889fd797aN
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ