23ff7582d5ad89b0694549be707f54e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23ff7582d5ad89b0694549be707f54e7
Size

125KB
MD5

23ff7582d5ad89b0694549be707f54e7
SHA1

d6bf62389b39d0f336afb6d4d7b4308df9285318
SHA256

cd3e0ed823ab80eae00c19eaf3a9ae5870ed7d453b8cbf999ab10130c627be78
SHA512

d5e672e95a7a8c731fc4b5ba411ac0c3fbc5d40116f4e63cf6489cfa530ccd6c6a3541b5b481397ce553df6de8f7b530f63fdf51d3c04bd9a9dee73a5d68547c
SSDEEP

3072:3DIh2bJyY6eaqZ3NVnK5wVON79CrYkl/kS0iFo:3cEAqaqZTcwVOvCrYkl/H/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23ff7582d5ad89b0694549be707f54e7

Files

23ff7582d5ad89b0694549be707f54e7
.exe windows:4 windows x86 arch:x86

28f29d5f206ff916477b14e69b6d8a7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Shell_NotifyIconW
SHGetFolderPathA
SHGetFileInfoA

user32

SetPropA
SetScrollInfo
SetScrollPos
SetParent
SetMenuItemInfoA
SetRect

kernel32

lstrlenA
lstrlenW
VirtualAlloc
GetCommandLineW
LoadLibraryA
ExitProcess
GetCurrentProcess
GetCurrentThread

Exports

Exports

_8QDDrb0

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ