32ed9afca6698083505060a0524e920e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32ed9afca6698083505060a0524e920e
Size

118KB
MD5

32ed9afca6698083505060a0524e920e
SHA1

27527f761c4320196a524d4afba4223f8c211580
SHA256

9f4cac80d290a850519a8db8bf478f10b2f9a45bcd173e39743addb7ca295ff5
SHA512

15565ec140a17e36eaf42f395d36c3ec72783827cee411667c820359733f6f7d962edd65777c42429899fc0b519064328bbc68c81c749da49e6e23e051c5977b
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9ZdA:Ag5obKGSqyOdXv7T77M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32ed9afca6698083505060a0524e920e

Files

32ed9afca6698083505060a0524e920e
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ