2131a6469001bc383b7611ad54dc7f5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2131a6469001bc383b7611ad54dc7f5f
Size

208KB
MD5

2131a6469001bc383b7611ad54dc7f5f
SHA1

3806c87638aa132f2786d8ec8667bd50e523529d
SHA256

56f4b5a1cf30c139f44986ab5940d4869d3544bfe5eb5c38f4c6410c99ff3a0a
SHA512

5d7d389edd89175505f4504fbba3a4e704fbe3495c8534574d5de7d0a2a4e3a6507c98c53bea74b196f169f2361a5d56c52cb5c5de0e4978f3dd98d1c507a4fd
SSDEEP

6144:kl2/rrluzQ59gZs8+juPWTzo7QFu4uMChMq4:9FuID8+j0Wfo7QFu4uJhH4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2131a6469001bc383b7611ad54dc7f5f

Files

2131a6469001bc383b7611ad54dc7f5f
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE