4255621a1936b654fd4a0afdafaf18fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4255621a1936b654fd4a0afdafaf18fa
Size

132KB
MD5

4255621a1936b654fd4a0afdafaf18fa
SHA1

65434a3666b94220981ecd87ec141d1b34077883
SHA256

20f2f1150d4effa86d6e47d830930477e0dfd2e0d54dedf2a470ccd81790eb71
SHA512

3ca437b034b5c40758fe5a368b1d2fb160e47adf2032687fa923ab2f1d67a774e7f64adb4e4df0978ee583e7ea98e385e7ab89e9f3d402acd07d1a07c02bfb3c
SSDEEP

1536:UsunMfV0VLSmfv5u+2JNGtlIfeTLRlw5krFAgZeM+/aMzdyNZzZaBDMkXb/sNGr4:cMfy74+2JJfSjsk62eMgwYBAkXANMiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4255621a1936b654fd4a0afdafaf18fa

Files

4255621a1936b654fd4a0afdafaf18fa
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE