15e8fe8e46abf91e0bbf0df4ce8f8798 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15e8fe8e46abf91e0bbf0df4ce8f8798
Size

334KB
MD5

15e8fe8e46abf91e0bbf0df4ce8f8798
SHA1

6801810c3fd9064a67b7d2649042faae8459a4fd
SHA256

6a7230bb7912aa83f37491fc662bb6427ca4bba94c3bb2156f53a896685943df
SHA512

55b1e556d31a728774539a580f0b92bb7e7edf09fa6fa46a7cedd7e3cc76fb7c0697aaf094ba46dd73e2b1854811627e36f9a7b18469fa0ebf4b7b43cf187fe8
SSDEEP

6144:GUm8d76JhYzQUOuFb7z9U7RQKIYdu0V/mj7rcS6WlsQpa:GU96Jiz3ZO7Rv580hmj76Qpa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e8fe8e46abf91e0bbf0df4ce8f8798

Files

15e8fe8e46abf91e0bbf0df4ce8f8798
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 226KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE