c844c2e53fa779f0c14203762fb4001402eb635e9b9db94dac444eb632bcb981 | Triage

Sharing

General

Target

c844c2e53fa779f0c14203762fb4001402eb635e9b9db94dac444eb632bcb981
Size

31KB
MD5

c36982cc0b5b65c354f7deb78cc4c3af
SHA1

534f30afe3a823cfccb34b43c36ee60d6e8e47a5
SHA256

c844c2e53fa779f0c14203762fb4001402eb635e9b9db94dac444eb632bcb981
SHA512

bc0f0368583f4d69ad48e0454e3f9ccf0bc933add57e0e17e1a625517f154459cf9fa0e6b75ee2f7e82fbe496878dd3dcd457647d56f7136b916221f618c9631
SSDEEP

384:ctz3+pmuMgm4PHgTfhl1IBxRlHzZN2zVqObfVbynZcH:6zQMQWlqBxRlHzZN2zAaVbRH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c844c2e53fa779f0c14203762fb4001402eb635e9b9db94dac444eb632bcb981

Files

c844c2e53fa779f0c14203762fb4001402eb635e9b9db94dac444eb632bcb981
.exe windows:4 windows x86 arch:x86

e3ba6c037c9f90379e6d8a4d6f1fe2f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
TrackPopupMenu
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
FlashWindowEx
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
GetModuleHandleA
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE