0301599b9a895b76b1f5602c00d846cf | Triage

Sharing

General

Target

0301599b9a895b76b1f5602c00d846cf
Size

50KB
MD5

0301599b9a895b76b1f5602c00d846cf
SHA1

8c4423d2b1e1645b81246bf18767f71981d0ade7
SHA256

cb7bcd3077be1a2e93bb462edcaa7fa32b225f999e251ea5a2eef1d143763a4f
SHA512

10267d2f998d863fec09dcbfe81470ecb1260e21b1598224032b4ffd574480fa13f66d8109f3f0e2fcf192345780a7ac687aa85517a34273a10ffa24c53b2868
SSDEEP

768:V8Mb9sU4+Vya5Wk7Fy3hJ0RYKebw+5a4+BrGZ+Fi6TBL7y38MQvJ9Fm8sdE7:2Ix4w1vFGhJ0qKAw8+MUZTBXysMQUfd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0301599b9a895b76b1f5602c00d846cf

Files

0301599b9a895b76b1f5602c00d846cf
.exe windows:4 windows x86 arch:x86

7c8750e03ef3c7ddf04fc81f8f1fa04f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CompareStringW
GetCurrentProcess
GetModuleHandleA
GetVersionExW
LocalFree
MultiByteToWideChar

user32

CharNextW
GetSubMenu
LoadStringW

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 45KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ