13d1a2c6753c51e240a74b783b5fa026 | Triage

Sharing

General

Target

13d1a2c6753c51e240a74b783b5fa026
Size

110KB
MD5

13d1a2c6753c51e240a74b783b5fa026
SHA1

6a93db1fae28719d8360012c6560ee2f14ac3169
SHA256

be780883b912dce33a32c173b69349c78441596d209820ab7ad33dcee1a73991
SHA512

2dd86604b7130a7ef0cc57928c3a02a54d9dcaf91b83d918e4bd982275007490c13bd8ddac88b54fb56e5a22fce0d74faefdb80627c6cf9560e6cc422a6cbf1d
SSDEEP

3072:AP24Yj+kkDS07GgBLjpVhmi3bEOo9itHF3:APiLq7ZjjNY9Yl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d1a2c6753c51e240a74b783b5fa026

Files

13d1a2c6753c51e240a74b783b5fa026
.exe windows:4 windows x86 arch:x86

4af58c45ac503da9e12fab8636c01da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoSizeA

shell32

SHGetFolderPathA

user32

GetCursor
GetFocus
GetActiveWindow

gdi32

GetClipBox
GetObjectA
GetCurrentPositionEx
CreatePalette

kernel32

RaiseException
LoadLibraryA
lstrlenA
ExitProcess
GetModuleHandleA
GetProcAddress
VirtualAlloc
SetEvent
SetEndOfFile
ExitThread
LoadLibraryExA
CompareStringA
GlobalAlloc
GetLocaleInfoA
VirtualAllocEx
LocalFree
HeapDestroy
FreeLibrary
EnterCriticalSection
GetCurrentProcess
GetFileAttributesA
InitializeCriticalSection
GetDateFormatA
GetCurrentThread

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ