201b314d626beb0b13d2063716f7e839 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

201b314d626beb0b13d2063716f7e839
Size

38KB
MD5

201b314d626beb0b13d2063716f7e839
SHA1

18153ec956dd407618bdf0cc72db28fa69d1c96b
SHA256

5a8475fc19f2cf90664b7b2c63b0ea73a6812b73bb2f5ae5ac10579135eb6478
SHA512

2fe8ac61b2a709ee44fa1ff35f4a57de8aea0097062627c1b3703c6f08a5015aa106724cdcfb552da1bb823a3c764a6a7cfb596692ce4b29ca6acb88fe5b23a8
SSDEEP

768:objqEFd8yMaZaqj+DQxHedPYy16QVWAGYqr55uuWX:Q/xauaE+2wxWJYMPuue

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
201b314d626beb0b13d2063716f7e839

Files

201b314d626beb0b13d2063716f7e839
.exe windows:4 windows x86 arch:x86

e987f3a4be03c22a5c4c51a99dc74423

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

SetParent
GetTopWindow
wsprintfA
IsZoomed
RegisterClassA
GetWindowTextLengthA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE