197c26149dca391aced180381ec6c0ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

197c26149dca391aced180381ec6c0ef
Size

81KB
MD5

197c26149dca391aced180381ec6c0ef
SHA1

dfbafbd771bd9d6ab589e35dc36f2d80483753eb
SHA256

388535abcd3c3a8985ba0731fd0a84065285dcc9ac23dd438e2bc023a44a6038
SHA512

57d7b12191844ecc71d56d41fa9601af8f48a8e08bf36361e52bd16d0b56c4adc8b1b1db2f273795db77cdf4e357e4c36e8d82719e914fd45c6ef905c9e9e204
SSDEEP

768:CW1ANn4dZf9YdrEoNbDd8KJ1bI4zhcsegxsMpPu7srxKvNRLKB8PwAJtnVM/tdjp:AafkJPP/zCslJPFiXPwmtaj94Mf1igl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
197c26149dca391aced180381ec6c0ef

Files

197c26149dca391aced180381ec6c0ef
.exe windows:4 windows x86 arch:x86

5225254113a0616a55d0dd9ac2bd8fc8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MapDialogRect
IsChild
ModifyMenuW
LoadMenuW
GetWindow
IsZoomed

comctl32

ImageList_Read
ImageList_SetImageCount
ImageList_Destroy
ImageList_GetIcon
DrawInsert
FlatSB_SetScrollRange

urlmon

IsJITInProgress
GetClassURL
CoInternetGetSession
CreateAsyncBindCtx
InstallFlash

comdlg32

LoadAlterBitmap
WantArrows
ChooseColorW
GetOpenFileNameW
CommDlgExtendedError

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE