24d17e8dea5586285b070a681c0e438e | Triage

Sharing

General

Target

24d17e8dea5586285b070a681c0e438e
Size

118KB
MD5

24d17e8dea5586285b070a681c0e438e
SHA1

af72a7c9b6819e838fcc2fc2c44666c21b92bb0f
SHA256

b050b39aa192fd47f2e0c653e2d73b87a67174951411258da63282b366954de4
SHA512

c9038750baba91144a8828e90eaf6e8f8d1c7d3c8e0cdaf86a1977a647366f121599f752db4c9063556b1c41f760903709dc394ff30df2cafa39eaf8e75ba147
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9ZiA:Ag5obKGSqyOdXv7T77L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d17e8dea5586285b070a681c0e438e

Files

24d17e8dea5586285b070a681c0e438e
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ