dbc9004396a9e4e1cec0977e595667665308d5ce5c12202afe9832e5067e0509N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbc9004396a9e4e1cec0977e595667665308d5ce5c12202afe9832e5067e0509N
Size

21KB
MD5

5918b33019f874496383dfae75e9e0d0
SHA1

5eb9575a5b212eb971d28f87a95091fa14672ad9
SHA256

dbc9004396a9e4e1cec0977e595667665308d5ce5c12202afe9832e5067e0509
SHA512

3a0cf36d6072bb812bd9aa6ce484c47c7eef36251add8ce617b3e20eda2c96f922b152f5485ebf12066d5db54aea7d595cb49252ed58e747f68c79c7a4d5eeba
SSDEEP

384:nZOd1djpW9s3mjHXRrs905INeZCFtejlIko5dN127BFVn2p4lAnZ8OJWYB+tnIOi:19djHXRrs9sINeZEtejlIkoLN127BFVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbc9004396a9e4e1cec0977e595667665308d5ce5c12202afe9832e5067e0509N

Files

dbc9004396a9e4e1cec0977e595667665308d5ce5c12202afe9832e5067e0509N
.exe windows:4 windows x86 arch:x86

ecf1bd3206976f3e5a517a2b934d647d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
MessageBoxW
wsprintfW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetModuleHandleA
CreateFileW
CloseHandle
GetFileSize

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ