15bc93ad018d7dc381c84a53f68ccab4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15bc93ad018d7dc381c84a53f68ccab4
Size

22KB
MD5

15bc93ad018d7dc381c84a53f68ccab4
SHA1

21aa52cf3af355cf925554caadc3b2481a5e413f
SHA256

79c841b7043e659268a03fadf88494550c53fd29f2b800eff7bb1286955251c1
SHA512

8bb7e13e1b41bad4045713f5324c1e9d2fbd9cfb4cd1d211ab827c2606c0d220c046dbf38b9240543fa0db054e41b4d269230b5367d9dfc83434498da5936d59
SSDEEP

384:MDSA+mgve3qIfBME8STlvBSjV6C4hhdeG11XAGaQIfht:S+lvFY8SJI+xBAGTMt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bc93ad018d7dc381c84a53f68ccab4

Files

15bc93ad018d7dc381c84a53f68ccab4
.exe windows:60858 windows x86 arch:x86

923ff179b4e648f39f0da90ab475a123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
LineTo
StretchBlt
LineTo
GetObjectW
DeleteObject
MoveToEx

advapi32

RegQueryInfoKeyW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExA
InitializeAcl
AdjustTokenPrivileges

kernel32

VirtualAlloc
ExitProcess
SetEvent
GetCommandLineA
CloseHandle
LoadLibraryExW

shell32

SHGetFileInfoW
DragAcceptFiles
SHGetFileInfoW
SHGetPathFromIDListW
DragFinish

user32

ShowWindow
DestroyIcon
PostQuitMessage
EnableWindow
SetTimer
SetDlgItemTextW
GetDlgItem
GetSubMenu
SetCapture

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ