237252d4eefe9306f64cacbbdf2df527 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

237252d4eefe9306f64cacbbdf2df527
Size

50KB
MD5

237252d4eefe9306f64cacbbdf2df527
SHA1

b65438f0376bdbc130611f3523f28c978f8814d9
SHA256

9bba365db543e9e52fd845fe517a23e3eded426f2d4a51e08cd4a0434bbbea8e
SHA512

7dbb886f1f2fd4873fece14a63e9447845309a78a16ea5a523bf38b682daa27062d590dbc524f14a3c200c495ebe8510e60dd657f8404abb4e706dbbac2b9f66
SSDEEP

1536:jHhlfDI9aT7PgJmuV/eRMkNahddiVJ8+WwJe7TG1LxP:jIaT7PnNahddiVJU7TG1LxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
237252d4eefe9306f64cacbbdf2df527

Files

237252d4eefe9306f64cacbbdf2df527
.exe windows:5 windows x86 arch:x86

9ca8fc42e2f5aab42cdac80b67fb8a5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam
RegQueryValueExA

kernel32

CloseHandle

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CloseWindowStation
DispatchMessageA
GetClassNameA
GetIconInfo
GetKeyboardState
GetWindowLongA
OpenWindowStationA
SendMessageA
SetProcessWindowStation
ToUnicode

Sections

.ebyt
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifsx
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tqt
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ