107694f914210e1a9951fd0409544bf0 | Triage

Sharing

General

Target

107694f914210e1a9951fd0409544bf0
Size

52KB
MD5

107694f914210e1a9951fd0409544bf0
SHA1

8cf843043419f7704754c00855960c7b4557144c
SHA256

44e214325a13f804a00d126e9a9d4c0c0c89e38816fc929fa80aabec517ee042
SHA512

ee75bc4cdca9f232df0e7581625886fcb9c4bc357322d043023cf96b3f48825d28dc9b15913d5885465222db3f5b28529a461a781c83cdb7e37dc868434ec27b
SSDEEP

768:YQwI7M2Wp3LjbeKmxP4tVO3PVjll+CKI+c0rOQpf8Wk21vuNGkpAa4FPHitWZAuo:3cLmxOVORn+5I+FrOYh1GNGgM/iRT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
107694f914210e1a9951fd0409544bf0

Files

107694f914210e1a9951fd0409544bf0
.exe windows:5 windows x86 arch:x86

2d07c27ec4e5e3dee279ac87391a4571

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfW

user32

CharUpperA
ExitWindowsEx
FindWindowExA
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetMessageA
GetWindowThreadProcessId
LoadCursorA
MsgWaitForMultipleObjects
OpenDesktopA
PeekMessageA

Sections

.vib
Size: 43KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tevgr
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zozkb
Size: 5KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ