6e2331a1238424b6a269c26ee39877a0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e2331a1238424b6a269c26ee39877a0
Size

28KB
MD5

6e2331a1238424b6a269c26ee39877a0
SHA1

7feff38536284b699714f99f65eccdf151bcc17c
SHA256

41de20d2df9761820ef6f954bc9fe31c3c339150662d8b9e24d0dd9ec89cba31
SHA512

7dfa3e3e89964b8f339b97482c1f78f5119994f80c94c83a85839500babbb7c7f9ae38920202f0fce43141a482b98a2c53c19d2a0ee1c2d663d71197751b5be2
SSDEEP

384:UQApLn2upM9Ytx5CS8x7XYLPmn0/eyARl0+Y4Pl:O2hY1CPSen0fcLY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e2331a1238424b6a269c26ee39877a0

Files

6e2331a1238424b6a269c26ee39877a0
.exe windows:4 windows x86 arch:x86

9960576fabb1678784f455b4115c1ccc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
CreateMutexA
GetExitCodeProcess
SetLastError
CloseHandle
GetEnvironmentVariableA
ReleaseMutex
GetProcessHeap
GlobalFree
lstrlenW
FindResourceW
lstrcpyA
UnmapViewOfFile
CreateFileW
GetCurrentThreadId
HeapCreate
LoadLibraryExA
GlobalUnlock
TlsGetValue
GetModuleHandleA

user32

CallWindowProcA
SetFocus
GetCaretPos
DrawMenuBar
CreateWindowExA
DrawEdge
CheckRadioButton
GetDlgItem
CreateMenu
IsWindow
DispatchMessageA
FillRect
GetDC

rsaenh

CPSignHash
CPDecrypt
CPHashData
CPGenKey
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qesrgpd
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE