23689cb492b9b957d808bbf06d455c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23689cb492b9b957d808bbf06d455c65
Size

77KB
MD5

23689cb492b9b957d808bbf06d455c65
SHA1

aa69e59a4fd77f1d5c71b2d96d0aa80bd8bd6f5a
SHA256

cb64fe7f9a956a25e43af91a09a075ce859c751ca652ee509d1332d7e094bc4a
SHA512

add344ce06b2b9b97adf261a0b31b9e6ebe9f4d0e699c2519a8784a138c738f620e1b52ddda5bcedefbb2274823e3d9305aec2238ca1cd29c5e543d020b8f2a1
SSDEEP

1536:zLz2GXuTGFiA8W+GSF7t/4DBTnlTZSFFVcUdxbbl:zPuT6gW+GS8DxlEX9Dbbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23689cb492b9b957d808bbf06d455c65

Files

23689cb492b9b957d808bbf06d455c65
.exe windows:4 windows x86 arch:x86

7908e41278e853073da5db2aada32fcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ModifyMenuW
LoadMenuW
GetWindow
MapDialogRect
IsChild
IsZoomed

comdlg32

LoadAlterBitmap
WantArrows
ChooseColorW
GetOpenFileNameW
CommDlgExtendedError

urlmon

IsJITInProgress
GetClassURL
CoInternetGetSession
CreateAsyncBindCtx
InstallFlash

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE