10647e39f5331c51eb6faa6131126d6b | Triage

Sharing

General

Target

10647e39f5331c51eb6faa6131126d6b
Size

66KB
MD5

10647e39f5331c51eb6faa6131126d6b
SHA1

5f6966a9972afdc8da729502e6565e20fa3ed657
SHA256

12fa71a858534f9b3b41f8f98557051d346dab50e5845501375ea48ff467d09c
SHA512

24e6877516c02e91b36b33ffed996e6f831a6eddbe9a6011cca1ef7ef15fdfe9710328737dac7f2c5fbddd90aa2efc65fec4cb825f9aa95117168118af7d45e4
SSDEEP

1536:5GI0DhPLVICixPwez/ESdx3LNTs6wwMEm48H:j0DhPLmhxNdxbVsn4m4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10647e39f5331c51eb6faa6131126d6b

Files

10647e39f5331c51eb6faa6131126d6b
.exe windows:4 windows x86 arch:x86

e14c17e6d3e985b21b36c8396a6b3e2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetFileAttributesExW
SetThreadIdealProcessor
InitAtomTable
_hwrite
AddVectoredExceptionHandler
RegisterConsoleOS2
CreateProcessInternalA
UpdateResourceW
SetThreadUILanguage
CreateTimerQueueTimer
HeapSize

user32

IsGUIThread
BuildReasonArray
GetMenuItemInfoA
DdeFreeStringHandle
RegisterWindowMessageW
WindowFromPoint
GetShellWindow
DrawFrameControl
GetParent
WinHelpA
IsRectEmpty
DdeAccessData
RegisterClassA

Sections

.text
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE