2249149b7a487f3a33317338e658fdec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2249149b7a487f3a33317338e658fdec
Size

1.0MB
MD5

2249149b7a487f3a33317338e658fdec
SHA1

edfae367c92945b638193c56f787ba38cd593e6d
SHA256

7de062114a451c7ccab97245bb996da5d2e2be6e15e2a2f93df20235a5762952
SHA512

dcc6aa04d5caa9f459a3f06deee98ba2c35bc7245d6e1e60ae877f42f9c7dc93533168024d0a48d3ac79d88c505b1cac3834ab0517e2dd740db53afd0d756cd1
SSDEEP

24576:xvSyaoaPDXQ0Y8tycaYn3iY1wFPji2TajyDd2WIli64j8uvJbc:xvSnoajQ0Y8tRaYn3iYem2TCyDd2WIvb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2249149b7a487f3a33317338e658fdec

Files

2249149b7a487f3a33317338e658fdec
.exe windows:4 windows x86 arch:x86

ecc5a19e7d11e52ccf610250fd897800

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
LocalAlloc
GetTickCount
GetLastError

gdi32

SetPixel
LineTo
PatBlt
GetStockObject
CreateCompatibleDC
GetTextMetricsA
GetTextColor
GetObjectA
SetBkMode
GetPixel
BitBlt
MoveToEx
GetBkColor
GetDeviceCaps
CreateFontIndirectA

Sections

.text
Size: 1024B - Virtual size: 1007B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1015B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 439B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1018KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ