03dbdab2ba31712e9266c0131d6c10f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03dbdab2ba31712e9266c0131d6c10f5
Size

28KB
MD5

03dbdab2ba31712e9266c0131d6c10f5
SHA1

cf054825a72e48c332f427ead247e5d35826a53d
SHA256

420a6a95cee2c4f44ee5091574e3b5b156b847b542cf7018e3d59ebc28ea57da
SHA512

1d1718a2332ec4441c82a9249b9d12dc393ff9f21a937097b3417e99f2bf403b1b92f3e99ed49c8040326801f65a308ccaf6a119a325675545ed3938c263e6b2
SSDEEP

768:qW7pJsxsbcz//o6qi22mKCdkBre3X3wyB4HCQESj:hJsxGIHQMCdkBqgpiQES

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03dbdab2ba31712e9266c0131d6c10f5

Files

03dbdab2ba31712e9266c0131d6c10f5
.exe windows:4 windows x86 arch:x86

157b6b6b2d3b833400a9d1a156399a84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrRStrA
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 6KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE