24448715d8358bd72e2eeb6e09882097 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24448715d8358bd72e2eeb6e09882097
Size

52KB
MD5

24448715d8358bd72e2eeb6e09882097
SHA1

44d1512aec91052d8f0729e66aab5e635f30c981
SHA256

c450aa52e9001c19d15fb16dda915e62270999f153ffb37ec5153618c77c0ba8
SHA512

41252d875d43605cbc1cad62ddd9fed2481b8a239774f5f842ec7ebe4a2fa3a863364d5582939f643167091cafe134e04dbe4d0dd667a80c048a9cce8d6cfbbe
SSDEEP

1536:STVZTTqm25yrZ7RA6IEkkuYyp8hO2HI8W7Z/ETa:STCPg7jkZmhO2oyTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24448715d8358bd72e2eeb6e09882097

Files

24448715d8358bd72e2eeb6e09882097
.exe windows:5 windows x86 arch:x86

3616c3154bd4964b334fcff16c7d3d88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcessVersion
GetThreadSelectorEntry
GetTimeZoneInformation
HeapCreate
OpenFile
ReadConsoleA
SuspendThread

advapi32

AllocateAndInitializeSid
BuildExplicitAccessWithNameW
BuildImpersonateTrusteeA
BuildImpersonateTrusteeW
ConvertSecurityDescriptorToAccessW
DeleteAce
EnumDependentServicesW
GetAclInformation
GetEffectiveRightsFromAclA
OpenBackupEventLogW
OpenEventLogA
RegQueryInfoKeyW
SetSecurityDescriptorOwner
StartServiceCtrlDispatcherA

shell32

CommandLineToArgvW
DragQueryFile
DragQueryFileW
ExtractIconResInfoA
FindExecutableW
SHFileOperation
SHHelpShortcuts_RunDLLA
SheFullPathW
SheGetDirExW
ShellAboutA

gdi32

CreateHalftonePalette
CreatePolygonRgn
FixBrushOrgEx
GetKerningPairsA
GetWorldTransform
PolyTextOutA
SaveDC
SelectPalette
StrokePath

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE