184408e5e1406403b9834096de5b868d | Triage

Sharing

General

Target

184408e5e1406403b9834096de5b868d
Size

182KB
MD5

184408e5e1406403b9834096de5b868d
SHA1

6952322c163d717e347ee954943b58a4dc80cb64
SHA256

0d43d969bb31cad9262f141839528bfd6e222d994ac271afd8bd5f233ade5f15
SHA512

52effe3dac8ee6052cf918450989e5be5aab64e0971a4b17a93a75025a69193edfc8eaae15d2874b51f680e790723d6b38cfe179d97f7c085664b8b2a14eb738
SSDEEP

3072:JJkwO6C+wE930rlT7ntRfZn4nsnVLLFJucBRN3x/2Gz0HF:JCwOB+wE9gTbtRRxJHBHh/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
184408e5e1406403b9834096de5b868d

Files

184408e5e1406403b9834096de5b868d
.exe windows:4 windows x86 arch:x86

ae3f679c9eab37cbd8819bbe683be2b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLanguageGroup
GetTempPathA
CompareStringA
GlobalFix
GetThreadLocale
GetCommModemStatus
AddAtomA
TransmitCommChar
CreateThread
DosDateTimeToFileTime
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SetWindowLongW

shell32

SHBrowseForFolder
ExtractAssociatedIconA
CheckEscapesW
SHGetPathFromIDListA

gdi32

SetPixelFormat
EngUnlockSurface
GdiStartDocEMF
GdiConvertBitmapV5
GetDIBColorTable
GdiConvertBrush
StartFormPage
EngTransparentBlt
GetWindowExtEx
GetTextExtentPointI
GdiConvertRegion
EngStretchBlt
EngLockSurface
SwapBuffers
GdiEntry1
GdiPrinterThunk

Sections

CODE
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 172KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE