23c4db1d95b44f50c161d5e86f4838ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c4db1d95b44f50c161d5e86f4838ba
Size

17KB
MD5

23c4db1d95b44f50c161d5e86f4838ba
SHA1

a789137f3d659ea28db584eea1b27798e619cfc1
SHA256

86c282944b73ead8840ce38cfaf8b7b44c86121abefc763039526aad72c86d2b
SHA512

cd3f2c9416cb697f7d877c956970b4db214f3a2a1592411ba89fadffd31e80ad4ee68a31a14549c3eff83f3158987f88f2a195b83bb27435901d98d4ec0a58c8
SSDEEP

384:R+fOiiF9GC9PzmKalSibBI48B/Hrg9ygEHs:o2K8zmrlhBc/HIyvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c4db1d95b44f50c161d5e86f4838ba

Files

23c4db1d95b44f50c161d5e86f4838ba
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ