Snap2HTML[.]exe[.]vir | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Snap2HTML.exe.vir
Size

1.4MB
MD5

6052af94f4da05fe0dfac7eb741dc6ef
SHA1

c1ac2a9876ce28d75d7cfeda075eb0f10bf04c95
SHA256

dd1acee29655b5280b7ef4499a4eb9147673dbbf8db8259dac8c14562688ab82
SHA512

f213532a0c69a1085cf76bff84539e87323074278ee5b7c4a8a4358b55290e1b686a26933a98b1b6177e1781ba30f12ac18fae99542e6ea28471a56aa4d1311a
SSDEEP

24576:hA7kGLUXARuVCjNLaWx8VkbURa33yxJQ32GCZC8h2jubOmnzguIMl2:LxAcVCj4YCk3CZC8Z6uIMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Snap2HTML.exe.vir

Files

Snap2HTML.exe.vir
.exe windows x86

88381b84da56810b869e897e6d45bd58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.text
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bxpck
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE