226cdb00f31908939195bc5b0552fa45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

226cdb00f31908939195bc5b0552fa45
Size

698KB
MD5

226cdb00f31908939195bc5b0552fa45
SHA1

a618722d8f27d8b99b3bad1e8b6e2a941df3a91a
SHA256

58c0e68c09f7874a2fd38e2af2f0e61e737707672eabfb42083dd8f026e40c03
SHA512

0775b92585f1125349e66b9f95c4a6461c5627e8a57ed527bed78a2f8c775b332ef9acf4e02a98b3d7c8f0a8e406008ce0aacf9e83136aa637539f35a2597c5f
SSDEEP

12288:6jdo1TiDID5AN20rqDybz0p91GMygCGTxgSdpDCPbO2ravXMoJ1:6jdo1GD05ANjFHWyn+iSWbO2evXMoJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226cdb00f31908939195bc5b0552fa45

Files

226cdb00f31908939195bc5b0552fa45
.exe windows:4 windows x86 arch:x86

c55e6ec32ad148ddc5bd097a0d6ca2a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
Sleep

gdi32

GetTextMetricsA
CreateSolidBrush
LineTo
DeleteObject
CreateCompatibleDC

user32

ScreenToClient
EndPaint
GetSysColor
DestroyWindow
CreateWindowExA
DispatchMessageA
EndDialog
LoadIconA

Sections

.text
Size: 512B - Virtual size: 439B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 957B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 693KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ