281c711f1db501631504d6a840ec861b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281c711f1db501631504d6a840ec861b
Size

229KB
MD5

281c711f1db501631504d6a840ec861b
SHA1

487cc896ef4eaee9dc36ba89a630859a5d910b07
SHA256

a5988297bf3602052249f04df767c44537c178e8f656189ee343d03ce5b276b8
SHA512

daafdad696f086c3cc17b7bb05519673d02c5a6b271025001486c5ca45591aabbde4c06809363720180a10407beadd05c28d25635370c732f167ab587e584192
SSDEEP

3072:65M7k0jBWsbCtQ4avnDPONV5rOqbtGRmqDYN:QM7k014Q4IPONrtbtTqDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281c711f1db501631504d6a840ec861b

Files

281c711f1db501631504d6a840ec861b
.exe windows:4 windows x86 arch:x86

d419a72056988a2217fe580f87ec577c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

GetOpenFileNameA
FindTextA

shell32

SHFileOperationA
Shell_NotifyIconA
SHGetFileInfoA
SHGetFolderPathA
SHGetSpecialFolderLocation

user32

CharUpperBuffA
GetSysColorBrush
KillTimer
IsWindowEnabled
CharNextW
GetMenu

kernel32

ExitProcess
LoadResource
LoadLibraryExA
VirtualAlloc
InitializeCriticalSection
LoadLibraryA
VirtualAllocEx
HeapFree
GetModuleHandleA

Exports

Exports

UgfBy6z9q9t

Sections

CODE
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Epdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 735B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecdata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ