81e4400304454b2a9ac6f0f05c761e221d652c5a263e83cb270c083a6d851077 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81e4400304454b2a9ac6f0f05c761e221d652c5a263e83cb270c083a6d851077
Size

1.7MB
MD5

428c8a61ef9cfb2647ae5d176e8d6876
SHA1

ab29f573d61264f843523f7dca9fd1aaac06e291
SHA256

81e4400304454b2a9ac6f0f05c761e221d652c5a263e83cb270c083a6d851077
SHA512

f6748f3a585d5eb9ef366d59c12f1c92f8ee761a2891dbf9b1e47b074030bc8efcd0fb75c5b19aa9bea7fda7e1f21ddfcf8c77b11e88b03a1da4dadda53827ce
SSDEEP

49152:fdL0SQ/ohCwi0aUL9XYkRz7gzWUF7YgPU+ay:DQ/ShLl/B7zdgcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81e4400304454b2a9ac6f0f05c761e221d652c5a263e83cb270c083a6d851077

Files

81e4400304454b2a9ac6f0f05c761e221d652c5a263e83cb270c083a6d851077
.exe windows x86

94365a53497b62eb36b024824e4c0311

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer

user32

GetWindowTextA

shell32

ShellExecuteA

ole32

CoUninitialize

gdiplus

GdipCreatePathGradientFromPath

oleaut32

VariantChangeType

wininet

HttpQueryInfoA

ws2_32

select

gdi32

GetDIBits

imm32

ImmAssociateContext

msvcrt

realloc

shlwapi

PathFileExistsA

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

Sections

.text
Size: 449KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ