1fea038264d79033c8e9da2970232dbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fea038264d79033c8e9da2970232dbe
Size

132KB
MD5

1fea038264d79033c8e9da2970232dbe
SHA1

9123b8ebefe56fa0abffa818c68b31ee4f88b5cf
SHA256

20e4924295d1b3297561d18a0bddd719aed03a66aa3aa9ef44924735477decf0
SHA512

575f70e289150126fb437a545e87606f98bd7d839d6d6644fb1b50d6c0ea92f02bc2747084e4036730cd961d9a14bbff70140d9f425412b8b1798398a72f5b04
SSDEEP

3072:dvE5S5f4NUEyk3iGyUCKY5XD1+YlfUrb5QNTVT:dMm6d+5XD1+YOyTV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fea038264d79033c8e9da2970232dbe

Files

1fea038264d79033c8e9da2970232dbe
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE