ff1e4bf6655c460327d613cf78648096 | Triage

Sharing

General

Target

ff1e4bf6655c460327d613cf78648096
Size

24KB
MD5

ff1e4bf6655c460327d613cf78648096
SHA1

32f17db9792aeff7c8b16f53088e5fcde8920245
SHA256

56f2d089cca510d59f8e1413b87b304294d4f4ce3d61ac42a4f9183a5eab4bf1
SHA512

1accbe0bf1e3d23279f2a25f1a77b4a7b845248348ae250b83d72a871030dd0bde0a9e1e94930bac2ff6cdf49c7ac3d477d5ea319ebd5083ab80efe3cd6810bd
SSDEEP

384:bwbfIf6ymg7ABf+2C8/pqI22oL84Qay1G4R2cFnAX7:s6wc2C/ICA4fyhxtAX7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1e4bf6655c460327d613cf78648096

Files

ff1e4bf6655c460327d613cf78648096
.exe windows:1 windows x86 arch:x86

e6ac59b33574a2466ece6b985a353105

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellAboutA
InternalExtractIconListA
SheChangeDirA
DragFinish
DragQueryPoint
SHGetMalloc
Shell_NotifyIconA

user32

EnumChildWindows
EqualRect
FindWindowA
GetCursorInfo
FillRect
DragObject
GetDlgItem

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE