23dd3b2bf51ee633e80c1a0e26e46945 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23dd3b2bf51ee633e80c1a0e26e46945
Size

240KB
MD5

23dd3b2bf51ee633e80c1a0e26e46945
SHA1

af4c0dfbfb997ede4efc6312c235591cc4f8f4d1
SHA256

0fd2e92c74d10a8da1e6a7855b580f29a1db7d60b21e6efad62599f822ddd1db
SHA512

becd9775941fd781d7543e848fa533ffdef3fab4f87a8c9efa55d4ddab47a42779f4a85a9d9cd35bddbea3d33b953cae3b1497d53fe24eefbb952104690c2eb9
SSDEEP

6144:RxB+FRj0j7FYdMf5InUsl1/smBnvy5yA8n:RKp0j7FY1nUsr0mw578n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23dd3b2bf51ee633e80c1a0e26e46945

Files

23dd3b2bf51ee633e80c1a0e26e46945
.exe windows:4 windows x86 arch:x86

8a689247b6c0196fadda0f0542a66896

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetStringTypeW

user32

ShowWindowAsync
DestroyWindow
AnyPopup
ShowWindow
ShowOwnedPopups

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 710KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE