284b605a2324f32180f80ffad96f3cf5 | Triage

Sharing

General

Target

284b605a2324f32180f80ffad96f3cf5
Size

148KB
MD5

284b605a2324f32180f80ffad96f3cf5
SHA1

67f38f63924b3f632b778d8f6fc97346d862bc3b
SHA256

5b689774ff7e44608974a7c6452085dae562c2551130e61b9ee96706220daa00
SHA512

f874127a2b7bfb97e1bb1ecb208d015ebdac552199fa1922ae53db599ac611fee4492e80d69cbfd46467feac934b47ed9a81e4e5d165327ff8c4e439790f8652
SSDEEP

3072:I0tIab6fqsbg9skXfsUD9ctWD3eBzuRouYurJCt3tuw5cxEM0:IbifwoD3GzuRDYQOtuqiEM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
284b605a2324f32180f80ffad96f3cf5

Files

284b605a2324f32180f80ffad96f3cf5
.exe windows:5 windows x86 arch:x86

d20dfbf8ab076ea5393597051c308318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA
PathStripPathW

kernel32

LoadLibraryExW
GetModuleHandleA
lstrlenA

comctl32

CreatePropertySheetPageA

Exports

Exports

?ExpandEnvironmentSampleStringsA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ExpandEnvironmentSampleStringsW@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesA@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ZeroAccesW@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.bss
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ