2524b4dd75dc6973331257b9c6ea969c | Triage

Sharing

General

Target

2524b4dd75dc6973331257b9c6ea969c
Size

287KB
MD5

2524b4dd75dc6973331257b9c6ea969c
SHA1

736fa19e2cb0d74910b550b7efbde53d1c6929c2
SHA256

17ba8da78a85a7e71b03db925fd4dbf658f3a829c2bcdd5907ab3e9410030119
SHA512

106cf56c073432f4a4153216bfb1f2a24aff9abbbeec42beba453fe0c72b883a0815ef132f812d5b29a6a0ea88875c425d14543a70f7bf5749125dae9b4d2875
SSDEEP

6144:aBv2OBkRUnsCteppHY61fvpFuHzRfQjN6YNega1VZtZ:aBO/Ktwpi69vneip6iGfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2524b4dd75dc6973331257b9c6ea969c

Files

2524b4dd75dc6973331257b9c6ea969c
.exe windows:4 windows x86 arch:x86

0d0c37d0a22159c4c2a7bb2b56e4100c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
fabs
ceil
malloc
floor
free
fclose
memcpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
HeapAlloc
HeapFree
TlsAlloc
HeapReAlloc

user32

CallWindowProcA
DestroyIcon
CreateIconIndirect
FillRect

gdi32

GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject

shell32

Shell_NotifyIconA

Sections

.code
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ