230511db0b25a7a60f52d1511d47f711 | Triage

Sharing

General

Target

230511db0b25a7a60f52d1511d47f711
Size

173KB
MD5

230511db0b25a7a60f52d1511d47f711
SHA1

9c43bfb43d2c1c668fea4bd1e566c223d2fa9ab8
SHA256

4125136593148ee2ef893103f5abc4e12a7222b583763c4d441cdd0499f360b4
SHA512

453e7b1a3313284bb48d2430eeeaf5ebc549b8ca07c13abc020fbe053975619081bb33bd9351b3cd69e0c92be23b26aea1ae8330ae6fbf275ef286d18690756c
SSDEEP

3072:D+5vtcwxu36vAWA3k373xejugPmw2uDL76aondrdckk0YM+uGhZ7VeE:DQcws3CdD373xeUcH76aodikk0YM+uGM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
230511db0b25a7a60f52d1511d47f711

Files

230511db0b25a7a60f52d1511d47f711
.exe windows:5 windows x86 arch:x86

aed874990c87be8527b57810a5a4c241

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlGetLocationW
ChrCmpIW
StrCmpIW

user32

wsprintfW
BeginDeferWindowPos
MessageBoxA
GetActiveWindow
RegisterClassA
GetWindowDC
SetMenuItemInfoW
IsCharUpperW
CloseDesktop

kernel32

LoadLibraryA
lstrlenA
HeapWalk
CreatePipe
GetModuleFileNameA
AddAtomW
GetDateFormatW
GetStringTypeExW
GetModuleHandleA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_wtoi
_amsg_exit
_initterm
_ismbblead
_XcptFilter
_exit
memset
_cexit
atoi
__setusermatherr
__getmainargs
remove
strncpy
fwrite

gdi32

SetDIBits
CreateBrushIndirect
CreateDiscardableBitmap
GetTextMetricsW
OffsetRgn
DPtoLP

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ort
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 142KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE