186a61a1b2da3e9c8fb1deab39e86ec1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

186a61a1b2da3e9c8fb1deab39e86ec1
Size

209KB
MD5

186a61a1b2da3e9c8fb1deab39e86ec1
SHA1

fba8bfa59d9c11da21081d6f30facd5a98ab08ed
SHA256

fd57cf4a809d5825483cbb69a24f5d4aeff9d7c2683ed6042598867b6edce65c
SHA512

041f069a5790863a4d4f7b96f9fb0f833032d7d6c720554df34ece6aa93d173351f86c7ad6f37bb66056b30b473c1753a1697a1ca7d199dc3bcfae8028483332
SSDEEP

6144:ZlH4Y0IvXpwiZsdeOIyoz6GJIpmboBd8EwbZNdvHicfP:LjRhwHJIJz6mymE055t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
186a61a1b2da3e9c8fb1deab39e86ec1

Files

186a61a1b2da3e9c8fb1deab39e86ec1
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE