332e16311181df79e5b4418983a3a6c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

332e16311181df79e5b4418983a3a6c2
Size

132KB
MD5

332e16311181df79e5b4418983a3a6c2
SHA1

29ce1d6d4814ea741b18ee5797ecef525bbdc188
SHA256

31fa5f05ac07aa218ea9e574201d3aca6edebee3028b340ec045400ab9b87c50
SHA512

eecac6703bc9b8ec5b96c4f5df671798ab48a5e0eeee964a5dcc757f17d2b39f475d23a173edec775b58e4ce53df9eae525c29cef5897979f719127eda023612
SSDEEP

3072:5hl+YpLFTL1Min0FiOImnE28t9PFIscx5U9eI7ou:5hl1ng8t9PKsg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
332e16311181df79e5b4418983a3a6c2

Files

332e16311181df79e5b4418983a3a6c2
.exe windows:4 windows x86 arch:x86

8055ba775ca6b6c6b5b0c0ae8ed352f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Options_RunDLL
ExtractIconW
SHBrowseForFolder
SHFileOperationA
ExtractIconA

comdlg32

PrintDlgExW
dwOKSubclass
ReplaceTextW
ChooseColorA
PrintDlgA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE