2d5dfd8a928044cafe84cace9c7e61be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d5dfd8a928044cafe84cace9c7e61be
Size

8KB
MD5

2d5dfd8a928044cafe84cace9c7e61be
SHA1

17545fcf13e9d192dbb9fae4b7a8277f8f1d0cf0
SHA256

79f3e89a9fe84a51645ac7a21e073ff414aca761664ac21a09362ee675685a25
SHA512

cfb0cfead6188a21458cb264cf82059e4d691828c850e600af43addbf8c747953672fc883da367a3562f587133bac0ed84d47e2565c4d265c0c0ed808369e7d5
SSDEEP

192:ak2kxp48Fxwj/A2yQ87HvfJtbArD1I3fz:bxzFW8x7HvfJt8rDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d5dfd8a928044cafe84cace9c7e61be

Files

2d5dfd8a928044cafe84cace9c7e61be
.exe windows:1 windows x86 arch:x86

5a4384b7c48b1ab33570e78836d6159c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwClose
DbgPrint

comdlg32

GetSaveFileNameA
PrintDlgA

gdi32

CreateSolidBrush
EnableEUDC
ExtCreatePen
CreateDIBitmap
CreateFontA

comctl32

MakeDragList
ImageList_AddIcon
ImageList_GetImageInfo
InitializeFlatSB
MenuHelp

msvcrt

_HUGE
__RTCastToVoid
_pclose
_cgetws
_ctype

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE