291d96bf8545778ba12ba978342a292c | Triage

Sharing

General

Target

291d96bf8545778ba12ba978342a292c
Size

21KB
MD5

291d96bf8545778ba12ba978342a292c
SHA1

e95ac9a5efb6b927a0c18a4462a28e5d05f91e43
SHA256

e153d925eaa2054c5a91e1b243b7f4a26965a4ecb3bb39a370876272b7c5116e
SHA512

84459f0e25d45371116404307d84220763cfae779253a870f077713e502dec82d861e9c330230c6245f59799fefced70b45e0024228a5591bd0227f07b3c6b07
SSDEEP

192:AJDi3AllExb8nD1KNQtCjfnrxwrPkF5E/CcPfOhQ:AJDHKxb8nDZkjvrxoPn3OhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291d96bf8545778ba12ba978342a292c

Files

291d96bf8545778ba12ba978342a292c
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ