2234bd0b894adfce68b68129ab3de7b4 | Triage

Sharing

General

Target

2234bd0b894adfce68b68129ab3de7b4
Size

183KB
MD5

2234bd0b894adfce68b68129ab3de7b4
SHA1

20636ef503bda6d554b2cf2e1494aafb2603e1cf
SHA256

124c0261e559ef56af1cdd46ad4be465f023b70447d3d92e1c2a7941cbada20e
SHA512

c52d94309d44acd8024d7c840377b37328cbc3d1fd6961e51dd908bf969ae191fe7b0e23a5e54d7254df646557c1573262dc6a96973023f3acc91791d0a213ab
SSDEEP

3072:1P/UjFQVowKadomQbtF9tfmAmj28jOeuoQFAVbmTj9Vt7achkUNaSlVFB+xHt:R/8iOwKUJQb795mAmj2EOsQFAgTt7a9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2234bd0b894adfce68b68129ab3de7b4

Files

2234bd0b894adfce68b68129ab3de7b4
.exe windows:4 windows x86 arch:x86

f081a0340e90474f1756fb7910351899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibraryAndExitThread
GetDefaultCommConfigW
FoldStringW
GetCurrentConsoleFont
WaitCommEvent

user32

DdeAddData
EndDeferWindowPos

shell32

SHGetSpecialFolderLocation
StrRStrA
SHGetDataFromIDListA
SHPathPrepareForWriteW
ExtractIconExA

gdi32

SetEnhMetaFileBits
GetViewportExtEx
FixBrushOrgEx
EngMultiByteToUnicodeN
GdiConvertDC
GetMetaRgn
FONTOBJ_cGetGlyphs
GetWorldTransform
STROBJ_dwGetCodePage
SetStretchBltMode
GetViewportExtEx
EngAcquireSemaphore
SetMetaRgn
GdiCleanCacheDC

Sections

.text
Size: 9KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 170KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ