286882cad1afa83580be079fc5bce940 | Triage

Sharing

General

Target

286882cad1afa83580be079fc5bce940
Size

99KB
MD5

286882cad1afa83580be079fc5bce940
SHA1

814e9ef1c109639b665b1c8676f46ea79e00da09
SHA256

e2af50bfb9c48cee689763c80816f3239c7cfa16c59d5c09dce8ca08741e5a54
SHA512

3ea7ff0e1fb5aac9e3cdf39bd2eaf535d244b7a2d1ca7f89d961a0f40a4e6823f26d4a7a836551bcda0f1608b6a5ced57b9dd37c86a8cb0c741d4c6527fe6939
SSDEEP

1536:kTTTrkMD9r6pRiXLAe7wBkHfX2JbnOHzpQdv8qu0TlhukUNqM9MJF0ev:2TTlepN0fXMONQlnuS/urUuMJF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
286882cad1afa83580be079fc5bce940

Files

286882cad1afa83580be079fc5bce940
.exe windows:4 windows x86 arch:x86

8550f8570b9c205dfeda38bf1f09c9fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExitProcess
GetACP
GetCommandLineA
GetModuleHandleA
GetOEMCP
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
HeapAlloc
LoadLibraryA
OpenFileMappingA
RaiseException
RtlUnwind
SetLastError
lstrcmpA

user32

ShowScrollBar
ShowCaret
LoadIconA
SetCursor
OemToCharW
MessageBoxA
MessageBeep
GetCursor
CreateMDIWindowA
ActivateKeyboardLayout
GetMenu

shell32

SHGetFileInfoA
ShellExecuteExW
ShellExecuteA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
SHBindToParent

setupapi

SetupGetInfFileListA
SetupFreeSourceListA
SetupFindNextMatchLineA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ