15e132b811b9646a02e9ccc0d341f109 | Triage

Sharing

General

Target

15e132b811b9646a02e9ccc0d341f109
Size

16KB
MD5

15e132b811b9646a02e9ccc0d341f109
SHA1

7b5f37cf6832effc48c79dd253246385dfbf6d47
SHA256

64994cf87e13be9f3e342086a0e64bb1341aeb09a790ea68bf20f2c056e9ce72
SHA512

d03ad468d5c5222631ff9e48e52e64fa4599467d5c0e644d5513c7b9b50478a5ffbedfd604de0ade78db52af0b8f0972707a6bac069f3461626c79b1c8694186
SSDEEP

96:Jz2lr8AoEv5Ke7SMJssytUAYmJAYT+ZiL+lrYvoImRWu:JWIkYQtlOlT+Zq+RYv5gW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15e132b811b9646a02e9ccc0d341f109

Files

15e132b811b9646a02e9ccc0d341f109
.exe windows:4 windows x86 arch:x86

7633d5cf714441400bde7afe88a0067c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

rand
_snprintf
_beginthread
exit
strncpy
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_CxxThrowException
_endthread

kernel32

LocalFree
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
ExitProcess
WaitForSingleObject
CreateMutexA
SetErrorMode
MoveFileExA
CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
GetModuleFileNameA
GetModuleHandleA

user32

BlockInput
MessageBoxA
OpenClipboard
SetClipboardData
SetForegroundWindow
SetFocus
ShowWindow
VkKeyScanA
keybd_event
CloseClipboard
EmptyClipboard

ole32

CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

VariantInit
VariantClear
SysAllocString

shell32

ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE