30aaf942eeb002e199005191bf22fb810b3fc268c5a67ffb2d654367f20d6fdc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30aaf942eeb002e199005191bf22fb810b3fc268c5a67ffb2d654367f20d6fdc
Size

50KB
MD5

2ce017c7c612bf3048b7c2b13fa9060e
SHA1

4357f070f7dc48a50c7e4c118666111526ac1f8f
SHA256

30aaf942eeb002e199005191bf22fb810b3fc268c5a67ffb2d654367f20d6fdc
SHA512

52221fbed6d14b32eebe5c26f3d5a9fba0d5015b45c7d0eacfa0c283317cc8ed7e3ddb2c00dfb3e0176d6a4b8cea5d9d2e4944c5c7050dcb27a0655234859b90
SSDEEP

1536:AOg0V7wdS0P79Jc78x+pu9fWWq53joCTfjw:AO/9wdV79JXMpu9fWWq53jW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30aaf942eeb002e199005191bf22fb810b3fc268c5a67ffb2d654367f20d6fdc

Files

30aaf942eeb002e199005191bf22fb810b3fc268c5a67ffb2d654367f20d6fdc
.exe windows:5 windows x86 arch:x86

b05c854936e80ba3420f36ed569f7216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
CreateWindowExA
EndPaint
GetMessageA
LoadCursorA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
DispatchMessageA

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE