1dce3ac57563ed3784bd94f98c5b471f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dce3ac57563ed3784bd94f98c5b471f
Size

64KB
MD5

1dce3ac57563ed3784bd94f98c5b471f
SHA1

bdd8379232d4d7eb4e96bdac4d82b5b20328e4cf
SHA256

5d50415740ab12c9b94438c2b0d5d2f16aec061b041d61b8b3762781cc9990ed
SHA512

8670b3b60976eb0200371f712a009e1f56df76be8231ef1bc2a14f9a67cd70175e9a6b6c90188e4a243a6828801bcc70fa7db27873845e182c557e525bdded45
SSDEEP

1536:msKcqSgI0JhMwlBxVT3vsZqbXOnfUTwhQjvHjn4yYGd:mDcqY0J2wjr/sCICfjXYG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dce3ac57563ed3784bd94f98c5b471f

Files

1dce3ac57563ed3784bd94f98c5b471f
.exe windows:4 windows x86 arch:x86

6764baeb8d960aa00c9977cb9882bb94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DriveType
FreeIconList
OpenAs_RunDLL
SHFindFiles
SHFree
SHUnlockShared
PathResolve
SheConvertPathW

kernel32

ExitThread
CreateThread
FatalExit
ExitProcess
CreateThread

user32

GetMenuState
CharToOemW
GetClassWord
DestroyCursor
CreateIconIndirect
FindWindowW
GetUpdateRgn

Sections

.text
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE