1de39d6352d84b6cd9c0b83f28edd821 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1de39d6352d84b6cd9c0b83f28edd821
Size

12KB
MD5

1de39d6352d84b6cd9c0b83f28edd821
SHA1

58b2232717dfa15db9c2a92a7b4b2d10e7f7b4b3
SHA256

cfe25468bfb029fa76042e8190507b1d0f0a2e5a5bd958bd0f0f52b05040576d
SHA512

57b28dbccb96616e045cb4fc684bbcf7739cf51d12ab5bef8d6bef3035c62e8de1838d3fe3330922c00d4a4e4277c064878461ea555a45230db8110d3b6d9256
SSDEEP

384:7m6IYIQxToUSwNBtJNkTn5BIP3uQ/ok/f0egOu:79kLw/G9qP+KxMeXu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1de39d6352d84b6cd9c0b83f28edd821

Files

1de39d6352d84b6cd9c0b83f28edd821
.exe windows:1 windows x86 arch:x86

855d28b330c7a179c1eeb3d4a3d18595

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE