13329bdb03e34ba784ba9139670e8ac6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13329bdb03e34ba784ba9139670e8ac6
Size

110KB
MD5

13329bdb03e34ba784ba9139670e8ac6
SHA1

19c1daed9433466dfb48a6fcdfee60dca5bea6ec
SHA256

88d3381be61e0663da7b7b933c0ce9ea51351a90e01fca2d6acfddfe8364656f
SHA512

3a8a75b1e55d9274d43b95cca6d11bd020b3f984920a6269338ad294fedc72bd50f4bf4ec74661d0516790230f577996f9d76c335540da06bcb50c9d725db0c8
SSDEEP

3072:AP24Yj+kkDS07GgBLjpVhmi3bEOo9itDF3:APiLq7ZjjNY9YZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13329bdb03e34ba784ba9139670e8ac6

Files

13329bdb03e34ba784ba9139670e8ac6
.exe windows:4 windows x86 arch:x86

4af58c45ac503da9e12fab8636c01da6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerInstallFileA
GetFileVersionInfoSizeA

shell32

SHGetFolderPathA

user32

GetCursor
GetFocus
GetActiveWindow

gdi32

GetClipBox
GetObjectA
GetCurrentPositionEx
CreatePalette

kernel32

RaiseException
LoadLibraryA
lstrlenA
ExitProcess
GetModuleHandleA
GetProcAddress
VirtualAlloc
SetEvent
SetEndOfFile
ExitThread
LoadLibraryExA
CompareStringA
GlobalAlloc
GetLocaleInfoA
VirtualAllocEx
LocalFree
HeapDestroy
FreeLibrary
EnterCriticalSection
GetCurrentProcess
GetFileAttributesA
InitializeCriticalSection
GetDateFormatA
GetCurrentThread

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ