10b3e479ca988eb2941f1523c4beede7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10b3e479ca988eb2941f1523c4beede7
Size

100KB
MD5

10b3e479ca988eb2941f1523c4beede7
SHA1

c5a8a470d9320008f566c660a52a20e678f1a7aa
SHA256

43b90f681fba08eac95dadf98ff4416c6194824ae8fefd8964ea61f08c163619
SHA512

b39918ee5d5af98e1691e5286ad4f2c94a811a3e9a898d6d1fee01a30603f94deb6aa4ed3d2a80d383f333f22cad27f8bf3eb5d45378db3010c9e58311e45153
SSDEEP

1536:nzLSX7xamuRZ8dqVzUruDpNuEeNiQloeFgq2fivws+VMrx+WsAmd4uGnqxEOTOt8:fSX1nFA9N4FNifeGqSDMEynnOqtJG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10b3e479ca988eb2941f1523c4beede7

Files

10b3e479ca988eb2941f1523c4beede7
.exe windows:4 windows x86 arch:x86

4126eb2abecd952f7e153dc34b07041d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

AnimatePalette
CopyMetaFileA
AddFontMemResourceEx
CreateRectRgnIndirect
Chord

comdlg32

PageSetupDlgW
dwOKSubclass
GetFileTitleA
ChooseColorA
FindTextW
CommDlgExtendedError

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE