15c5f3dfa2d77db77ab1f533db005e31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c5f3dfa2d77db77ab1f533db005e31
Size

15KB
MD5

15c5f3dfa2d77db77ab1f533db005e31
SHA1

4fd2a1b9d1d2e7e07f1d0c61450cca1e24f19739
SHA256

f8d4a797e6b2ed6724295cc7b2e21a8b9e1942a61f0c895cc2639aaa89179272
SHA512

86e9a7fc0ee069e63f75606762d4d054751335d63128509c7d59a31a7d972807ad39c46e4e406f94ec8794ebde5caacf788ecefd88426b9b7cc0b03420131be7
SSDEEP

384:hNrgWDixvnHBge7i+C86Z0gsnKIzdHvci:z7ijgwl6Z0gsfJvL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15c5f3dfa2d77db77ab1f533db005e31

Files

15c5f3dfa2d77db77ab1f533db005e31
.exe windows:1 windows x86 arch:x86

313a383c9ffd446a1d956ebd8fbe8a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE