24ffdddd18aed3eab2b7846c27745e91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24ffdddd18aed3eab2b7846c27745e91
Size

208KB
MD5

24ffdddd18aed3eab2b7846c27745e91
SHA1

2d92cdafbf61432beb182f2c4838581426ed6244
SHA256

59889b49cff1b1bfee66728a5e1e025e3d5438bb6e7df97b7ff31547f00dab57
SHA512

e925d4f4e35e8a665bec5233ef20b8109399a9963d56e97064111eea50eb874a9b669dec4ae08f4356739a70aebb92371456614ec159e795876266c89e5e065f
SSDEEP

6144:Uld+jT1VKdb26qeC32hQEb/Lvg+dGlHwb:geTCGLi/TzQB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24ffdddd18aed3eab2b7846c27745e91

Files

24ffdddd18aed3eab2b7846c27745e91
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE