182bca2ad75bd5e5683643f43b481665 | Triage

Sharing

General

Target

182bca2ad75bd5e5683643f43b481665
Size

84KB
MD5

182bca2ad75bd5e5683643f43b481665
SHA1

288ad9c607c5acbe31345a782263fe0eebbf0d89
SHA256

71b21f1296bb3815d8345232a1b26cd743597a315a0f9dcb399e92fc66d03639
SHA512

6354f813908c6da4f801bbaf947fb784d48cdab9dd0e0bd992a67e4433006ed13f92691158a30121198d946857fb3dcd166a55909bc9d7e6e96aa9cb5a36d771
SSDEEP

768:6//rtA5b5l+3XHgvAVGjgUkH7ijA3rWbzFQK/6bKoJP:+wb+nAYlD3rWWKgKoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
182bca2ad75bd5e5683643f43b481665

Files

182bca2ad75bd5e5683643f43b481665
.exe windows:4 windows x86 arch:x86

c30105e17c559f2ac6646d9eae3ee719

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
QueryPerformanceCounter
GetEnvironmentVariableA
HeapAlloc
SetMailslotInfo
GetModuleHandleA
GetStartupInfoA

user32

GetQueueStatus
LoadBitmapA

ole32

CoInitialize

msvcrt

_adjust_fdiv
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_acmdln
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

teiwkcr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE