1149b186a7e2f83a7457ddd5d8c36c75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1149b186a7e2f83a7457ddd5d8c36c75
Size

107KB
MD5

1149b186a7e2f83a7457ddd5d8c36c75
SHA1

1b88e3500cae4bac6f93129250e37894e046aafa
SHA256

5c1d0f440efb41c1ea761b59d49391a94a9758d777dd885004e04da7d7ee7feb
SHA512

903b1649ec5a40b0a459a45c8a227f78088efd3273a78f095fa3d8e36e6fb9c3508a13327ffd2fbadaa5711ae50e9ee48fa9348ef00d228bb6a2078af843d008
SSDEEP

1536:IPllYVl1oax6AszZfUTALUjSOmEDkgf243EdIX2cd8Ru5sc:OqR6jtI4d4eW2cRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1149b186a7e2f83a7457ddd5d8c36c75

Files

1149b186a7e2f83a7457ddd5d8c36c75
.exe windows:4 windows x86 arch:x86

42c668f1a83001059fbcdae49e78942f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoFreeUnusedLibraries
PropVariantClear
CoCreateFreeThreadedMarshaler
OleCreateStaticFromData
CoCreateGuid
MkParseDisplayName

comdlg32

GetFileTitleA
GetSaveFileNameA
ChooseColorA
FindTextA
GetOpenFileNameA

oleaut32

SafeArrayGetElement
SysStringLen
RegisterTypeLib
VariantChangeType
SafeArrayGetUBound
SafeArrayCreate

user32

GetActiveWindow

kernel32

GetACP
GetLastError
VirtualAllocEx
GetProcAddress
GetOEMCP
GetVersionExA
ExitThread
GetModuleHandleA

comctl32

ImageList_Remove
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Add
ImageList_Write
ImageList_Read
ImageList_Create
ImageList_Destroy

shell32

Shell_NotifyIconA
DragQueryFileA

version

GetFileVersionInfoSizeA
VerQueryValueA

advapi32

RegEnumKeyExA

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 611B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE