13d52214a7854b79f127abb331e41441 | Triage

Sharing

General

Target

13d52214a7854b79f127abb331e41441
Size

384KB
MD5

13d52214a7854b79f127abb331e41441
SHA1

f6ce7c1ce860087a737bef3c37e65e098e69d159
SHA256

9a0e928bc097345f21409fcaa0df7dd7fc6423162c50adbc52143d782bad3bae
SHA512

22acdb39d0b63997671e1a0a87d1c5fca2cb930a7a3195bf3fe4fff3287baa4073bd0087640c7a3963b84ae128f4db93dd39d5c07dec3206bdb2dd2a8d5d1c30
SSDEEP

6144:GBwtaRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808O3:4R5GdCs0O1BkBqwtjFc0fTjZOT59ozIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d52214a7854b79f127abb331e41441

Files

13d52214a7854b79f127abb331e41441
.exe windows:4 windows x86 arch:x86

1c7ba99f5c10dfc3ff8e7df3420aa298

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
CloseHandle
LoadLibraryExA
LocalUnlock
CreateEventA
GetModuleHandleA
HeapCreate
IsBadReadPtr
FreeEnvironmentStringsA
GetStdHandle
GetFullPathNameA
GetConsoleCP
DisconnectNamedPipe
LocalFree
CreateFileMappingA
IsDebuggerPresent
CreateFileA
FindClose
GlobalLock
GetLastError

user32

PostMessageA
EmptyClipboard
IsWindow
GetIconInfo
GetDC
GetMessageA
DefWindowProcA
ScrollWindow
SetFocus
DispatchMessageA
EndDialog
CreateDialogParamA
GetDlgItem
DrawIconEx

uxtheme

CloseThemeData
GetThemeMetric
EnableTheming
GetThemeColor
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ