257dfa5a00ade0c0c0e8772ded69f0ad | Triage

Sharing

General

Target

257dfa5a00ade0c0c0e8772ded69f0ad
Size

19KB
MD5

257dfa5a00ade0c0c0e8772ded69f0ad
SHA1

14e7f9fe993892aecec8dd7fabc5a6f56a48f0f7
SHA256

a00584ff4dbd55a43f4c359aaff65ecef54da912be0c7a7ca769932c9e3fb563
SHA512

c70d711e37ddd03895e03d968eb9c10cf26e5e9e63a91927c2c7b9458326f82ae9852ef43f98132d9ef944c9fc2f0b008a6d32e8f6251c5abc33c9507e11ba90
SSDEEP

384:K6fl4/9FOCeStdX4jZfWxGK+8k/1vwnTnIHPFIVNlnudCJLCJgwJgJUD:KwCec4jU9+z/2D8+zlnuWZs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
257dfa5a00ade0c0c0e8772ded69f0ad

Files

257dfa5a00ade0c0c0e8772ded69f0ad
.exe windows:4 windows x86 arch:x86

2667e22a4669ffb6e59edb0e759113d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetModuleHandleW
GetThreadLocale
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE