290db706e3c676d2af297503a54d0467 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

290db706e3c676d2af297503a54d0467
Size

118KB
MD5

290db706e3c676d2af297503a54d0467
SHA1

e48b33ced5c0f3a4eb82b58002861ae287b68818
SHA256

c28a5b5f18f557879141942f558727703b457490b955e06b3506dfdfb8c76829
SHA512

a639c742f0c03d9d74d07facba1cf2b6d24a071cfeccaa6630f9a1ac17cb0d8ffcdeb0da8167b61a214458ef1c2ba342f1c9c1138e5a30686a54c53ad9b969d1
SSDEEP

3072:89KyiAkyReZ4TzrVTZnrnpf9/0k8wOrwZJP6a3wOHHlWCWvJ1:cKyl069rpf9/D8w64V6a9HHlWCo1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
290db706e3c676d2af297503a54d0467

Files

290db706e3c676d2af297503a54d0467
.exe windows:4 windows x86 arch:x86

35a4942e0773bf7ba132e0584d0e06a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineA

shell32

SHLoadInProc
ExtractIconA
ILGetNext
FindExeDlgProc
PathIsSlowA
PathResolve
SHAlloc

user32

CharToOemW
CreateIconIndirect
FindWindowW
GetClassWord
DestroyCursor
GetMenuState
GetUpdateRgn

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE