189308d13b2c7c98a507bf770b648740 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

189308d13b2c7c98a507bf770b648740
Size

24KB
MD5

189308d13b2c7c98a507bf770b648740
SHA1

a9707a16e6cdeaa619c1ed338b1a74475084f24e
SHA256

1128cfbdbf8d59571b3163f72606b825925338b79776b9848342387497158741
SHA512

5f5626c628d60d40bd2291628019ddaaf0381f4c10bff53fcfbdfd3335136d7a2004cab5b867a92bc25accd948b42990fedfdb3e772e80b3a0773b7ca6b1bd88
SSDEEP

384:zPaxpjuxiFmHTs8zOCJ6LCtCMCBLVn1sV+piJkuGqvJb+tNOChJA+C:+xNuxSmzICJwCtCMCP1aqo6oaWsJAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
189308d13b2c7c98a507bf770b648740

Files

189308d13b2c7c98a507bf770b648740
.exe windows:1 windows x86 arch:x86

e07de0380b15f12d0c01be476da6b050

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation
SHGetMalloc
StrChrIW
SHEmptyRecycleBinA

user32

MessageBoxExA
CreateMenu
FlashWindow
ChangeMenuW

gdi32

FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
GetDeviceCaps
PtInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE