169a9a0c536b603fd2320ebf074ef764 | Triage

Sharing

General

Target

169a9a0c536b603fd2320ebf074ef764
Size

11KB
MD5

169a9a0c536b603fd2320ebf074ef764
SHA1

00132088b8414f7417e816330cbdde42834d98c5
SHA256

ae9a6fd41d4a93418a2c880d41366741cc332ccc0f8329fb0a019d41004c5237
SHA512

059a9102bc1c38355a51fe4a5616d3be7cf1d25a1febfe0919457b28313c974e223f8e7d055c2969c4e6239991c56a6a96c46017738ecd6e51de5060f9dd8de9
SSDEEP

48:6TjOzllVDOgeQ4XtSmBVUFJ7Y5DkrvdNgQ6kU7YDcUQ7UZBq7:kONeQt2iPU4Z2cUIo4ZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
169a9a0c536b603fd2320ebf074ef764

Files

169a9a0c536b603fd2320ebf074ef764
.exe windows:4 windows x86 arch:x86

75425eba3977a336dc6c3f1c3bcbbf37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ