0315b1f36aa4f52dd81c0feb1bc58bdb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0315b1f36aa4f52dd81c0feb1bc58bdb
Size

100KB
MD5

0315b1f36aa4f52dd81c0feb1bc58bdb
SHA1

570542d93fa3021e843c23dffa7624df6ee72d2e
SHA256

40aef81eb911c169768c74cc16bc0cc13f506bf4afd5da446e1152241a07b54c
SHA512

b87ef2bdda047c21122b78f727b3365484e2ab5658b31903cecd441731d4a9f18da9f3580ad4ff5a8c57a531f66f544c847015e579f3a0139185f85715dfab24
SSDEEP

1536:ysmsaaylca8nnSlbwtyxH4hHNfUTKZTEC9g9DUgmRWQ9v6ccCT:ysmsa0XnSeyH4hdUTY59ynmYu7r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0315b1f36aa4f52dd81c0feb1bc58bdb

Files

0315b1f36aa4f52dd81c0feb1bc58bdb
.exe windows:4 windows x86 arch:x86

18677307e798c43be208f4d1b20b91d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE