0e4225c7e98a677506cb10499c144044 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e4225c7e98a677506cb10499c144044
Size

46KB
MD5

0e4225c7e98a677506cb10499c144044
SHA1

cf9d7f2d3b3881235edbea9244944b76e9d2bb31
SHA256

172d166753a9a97a437cdb03634ca27d9c4e37de36e8d81c5b43d65403f8fd2f
SHA512

14ae155c000bd0c2e59ff4d79e58c20f715e76a008bfe8129696cb3e954a51a52f952cf6056da28e840b55b1825d8d30dff9e507c8263513279be5cbd45528b0
SSDEEP

768:p4Zn4wjjNMr0FZ3CtS06ottIv2TTTM1Kwbv6YvQB/5JTvhP/hof:p4Zn4wPswtDovtTTTEq1vd/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e4225c7e98a677506cb10499c144044

Files

0e4225c7e98a677506cb10499c144044
.exe windows:4 windows x86 arch:x86

69ee175c1a987a18653544c9c3682f7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

FlashWindow
ChangeMenuW
CallMsgFilterW
CreateMenu

gdi32

FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
GetDeviceCaps
PtInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

shell32

SHGetMalloc
StrRChrIW
SHEmptyRecycleBinA
Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation

Sections

.text
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE