1327a197d03f7073550806e38116c207 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1327a197d03f7073550806e38116c207
Size

21KB
MD5

1327a197d03f7073550806e38116c207
SHA1

8d6a36d38578704ac7a2231a61dc07bc39d0fd8a
SHA256

997459c75d8e37a07920ab8a17d0962264105c370480becabe4d6d4048723a12
SHA512

854e59cd6fdb2e14560952ee7896c0ec752bfae2fcc852851173620914285d1deb088d4fbfa03063bddc7717fcd2d9054ec4472457ca4b1c6d06c0d546a8647d
SSDEEP

384:6MTe8GX7tI3vyPJUKoUkcOh9NKsoIq5n5f1baMVh:6zDrROJZ9NKsCDf1+M/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1327a197d03f7073550806e38116c207

Files

1327a197d03f7073550806e38116c207
.exe windows:1 windows x86 arch:x86

07256d5a6442a0e355c7c36091d4c4de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE