23f32f3ddb83885c8835469131d4fc2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23f32f3ddb83885c8835469131d4fc2a
Size

326KB
MD5

23f32f3ddb83885c8835469131d4fc2a
SHA1

d6ae913d1ed5104e805a2af5946c66f9dbb73b46
SHA256

b04ae6ae0d26eb8bd668a8fe746627d4dac2553ac554a9b2b645f79090bc22a5
SHA512

03113b1041255a448025713e7e13bba5d19d859f5460248f8394e6477672783c3dc99a72bafb24581595de337e693636e721cb5237fc31fd3f71df071f925951
SSDEEP

6144:I6nCT/i53P4C4hSEn6VRdoXx46RvRkpkEWxMHgvFJpA1fpJYfl:I6Ci5MoiBvvVdvFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23f32f3ddb83885c8835469131d4fc2a

Files

23f32f3ddb83885c8835469131d4fc2a
.exe windows:4 windows x86 arch:x86

17ff0f7cad3cc506c7b0fbbc343e20dc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateIoCompletionPort
CreateThread
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetLocaleInfoA
GetModuleFileNameA
GlobalAlloc
GlobalUnlock
IsBadCodePtr
LoadLibraryA
LocalReAlloc
MapViewOfFile
ReadFile
SetErrorMode
SetThreadPriority
Sleep
TerminateProcess
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
lstrlenA

user32

CascadeWindows
ClientToScreen
DefWindowProcW
DestroyMenu
EnumDisplaySettingsA
GetForegroundWindow
GetParent
InsertMenuItemW
KillTimer
LoadBitmapW
MessageBoxW
MoveWindow
ReleaseDC
SetTimer
SetWindowPos
TileWindows

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 310KB - Virtual size: 313KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ