24515db2b009de899c3de0c7f2ad0bd5 | Triage

Sharing

General

Target

24515db2b009de899c3de0c7f2ad0bd5
Size

484KB
MD5

24515db2b009de899c3de0c7f2ad0bd5
SHA1

921a3d7fa26114c4e0e89f86f35cc52d77bdb473
SHA256

a278550a7026a8b01c66b3edf57f87d13ced0b4a13d6eb63d0634d3a84d982f1
SHA512

d86e68647b6ade081ae2f5cde2461a050fd71f16539dfcd36cf8c74dcb79161febf6d664f65507abedaa31ca4941d958b946ab9cadd132d2a9cce8ccaed4c40e
SSDEEP

12288:x0gwhv++s4HVQjt1DshBI/8JaTYAFKsrrV/iHVK0Dz:xHwvSsVQZ1IhyaahFKs3V/i1K0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24515db2b009de899c3de0c7f2ad0bd5

Files

24515db2b009de899c3de0c7f2ad0bd5
.exe windows:4 windows x86 arch:x86

62807a21ad2b832636046705c375556b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQueryInstallUILanguage
ZwFsControlFile

kernel32

GetUserDefaultUILanguage
GetThreadLocale
GetModuleHandleW

oleaut32

VarDecFix

user32

GetMessagePos

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE