24aa1c5c4f71ded1a6bf6ce39711957b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24aa1c5c4f71ded1a6bf6ce39711957b
Size

486KB
MD5

24aa1c5c4f71ded1a6bf6ce39711957b
SHA1

0aff11831cc7839ee07a296cc7d6e447620f5897
SHA256

1ec59c34ef0c04c147c682d7885d8f992866cdca5ab6d8208cffc2f9c43041de
SHA512

51f88aeea78c5e53ad872f5886f04c1f980f5b26b12cfaf4711017e7d637e89d0a5f3df141b2e2e201892b153370e381a3307c78d993895a7b30260230b07ae0
SSDEEP

12288:bm8gZyMuAAOTdK7CWMRBTLtox6o5D7QVLnNwB:bOhTc2R0QoCVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24aa1c5c4f71ded1a6bf6ce39711957b

Files

24aa1c5c4f71ded1a6bf6ce39711957b
.exe windows:6 windows x86 arch:x86

63ac7c2799723925dd310860701c20d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

GetUserNameA

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE