23ba0f4b8fcf16332e4d2568cb61e649 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23ba0f4b8fcf16332e4d2568cb61e649
Size

33KB
MD5

23ba0f4b8fcf16332e4d2568cb61e649
SHA1

bc7635f720a227002fdbaae0d5a9f04103b074d4
SHA256

2c763c834a481be87402dd8992dd956979d60894a4ff9f7f7955ff1aacc5d44b
SHA512

add92e2603a55c94140bde829ddc857dcd905299fd5208daf0ef17a6fd894eb54cf7aa59d27170e4eb929b136c2d80e4709f0c9f315f0210487e615a2017acfe
SSDEEP

768:Gs0LFGR8jJC8m2C394L3MUY+1t26/mjMAbo:GsqFGKTvC3+L31t1UimPU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ba0f4b8fcf16332e4d2568cb61e649

Files

23ba0f4b8fcf16332e4d2568cb61e649
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE