376a8982e584265c1c7403567733c6e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

376a8982e584265c1c7403567733c6e1
Size

44KB
MD5

376a8982e584265c1c7403567733c6e1
SHA1

8d5162bd6125b9d8fd36b9de331fddc864dfaed3
SHA256

bb03aa4b85d17180ef506fa8ee092a304145b3cfb61ffd3a8363f2fc90d552d6
SHA512

0a8c2e4c41720f72e3e87b6bf03ccfd3845cc6534679994ae790473b3fd729d836cd4a1483d72efd37742d0e353cb7835a19c80c91ce782f029770c303fb2179
SSDEEP

384:5ivsKRcWFQ6BIVsPNWKIHXJtTE8NfzIP5OD9610WRyATakuUjj0xcsP11KZplUTC:5idRFypmq3jfNb+MANexcsP1wZp+vG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
376a8982e584265c1c7403567733c6e1

Files

376a8982e584265c1c7403567733c6e1
.exe windows:5 windows x86 arch:x86

299c0b4bf89405ea68c7fcc277e5fbea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetModuleHandleA
GetCommandLineA

user32

CreateDesktopW
GetMessageA
DialogBoxParamA
LoadCursorA
LoadIconA
CreateWindowExA
AnimateWindow

gdi32

EnumEnhMetaFile

comdlg32

PrintDlgW

shell32

SHFileOperationA
DragFinish
ExtractAssociatedIconW
SHGetMalloc
DuplicateIcon

shlwapi

StrChrIA
StrChrW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT2
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ