371283455c89bbc6f727792875a4cc3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

371283455c89bbc6f727792875a4cc3e
Size

119KB
MD5

371283455c89bbc6f727792875a4cc3e
SHA1

ae6147040a2b884abff9545159e58514585912bb
SHA256

56c38e4b89b07f74380ab45a3e43244f14df60839912b56bf76c1db9af9c3ff5
SHA512

92dbf7c0288d63ac40b6d51b74e2a432fd3a96312eb2a1ed82fbbbeb9158e8605fded76b17920139d7b17410be648525aff120036b0df00f04ba9f06530c4764
SSDEEP

3072:GfY1rAmaJNhB6hQ2c3vUxi5wpaB/qelqxfjfMgXXC/:jZAmaXb6h1wUY5wpaBC7JYgX+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
371283455c89bbc6f727792875a4cc3e

Files

371283455c89bbc6f727792875a4cc3e
.exe windows:4 windows x86 arch:x86

1b6f71e5fa7c99d95bd8b74522c1d546

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
CommDlgExtendedError
FindTextW
ChooseColorW
GetOpenFileNameW
dwLBSubclass

gdi32

GetFontData
GetEnhMetaFileW
GetMapMode
GetClipBox

Sections

.text
Size: 73KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE