03418ed36f9f6930ead442d483e187c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03418ed36f9f6930ead442d483e187c7
Size

114KB
MD5

03418ed36f9f6930ead442d483e187c7
SHA1

217cdb5fc65d12886aced0346bb7814724fc120c
SHA256

d47094a300c663e3e3ddb8daee2ee94319a90fe03f15192807f7ba506fdbfff7
SHA512

d7c864c5c8ff542f9d96e549a2ca017122631444c3c0502fc7930eb2009a710f9e5aaf0389198035880dde8e46c156cad50b98f0ef4bd4dc9be91bd067ee9f89
SSDEEP

3072:D3gYHuXjd/cPjgC4iZFhdU0237zFHQf8DKZGAvhwO:5U/cr74qFvzQ7xHQYSGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03418ed36f9f6930ead442d483e187c7

Files

03418ed36f9f6930ead442d483e187c7
.exe windows:4 windows x86 arch:x86

f447edc0772cee288d161d574f63321f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegLoadKeyA

user32

GetActiveWindow
IsWindowEnabled
GetCursor

shlwapi

SHDeleteValueA

oleaut32

SafeArrayUnaccessData
GetErrorInfo
SafeArrayPtrOfIndex
SafeArrayCreate
SafeArrayGetElement
RegisterTypeLib

kernel32

GetVersionExA
VirtualAlloc
GetProcAddress
GetLastError
ExitThread
GetModuleHandleA

comdlg32

GetOpenFileNameA
ChooseColorA

version

VerInstallFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA

ole32

CoCreateInstanceEx
CoUninitialize
CoDisconnectObject

gdi32

RestoreDC
BitBlt

Sections

CODE
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE