387aa798b1d2221ef4a5af3c02d9d901 | Triage

Sharing

General

Target

387aa798b1d2221ef4a5af3c02d9d901
Size

27KB
MD5

387aa798b1d2221ef4a5af3c02d9d901
SHA1

742508200c6ad30fd238e9596dddce82f4a16386
SHA256

7dd6a199c2d6cf12a8b03cde1489c6cfd70763b21a8653f9e538777eea0517e2
SHA512

f1cd0485ce7822e510c4161dfd930e477cc2b4db6bed05a48334b93b66738b65691aab3219c2656e005bf2843eec49c68b423dae19ce41445e784a1d57f955be
SSDEEP

384:7gYuHU04Wlqv70li+pUItoC660ojg8uJIyY5rlyhpBZKXmfChl6EiKIDqj3CP:mblqYlJpUXCfg8uJgkhrZjQIuDC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
387aa798b1d2221ef4a5af3c02d9d901

Files

387aa798b1d2221ef4a5af3c02d9d901
.exe windows:1 windows x86 arch:x86

10bcda1b00c44baca332187784b11596

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

HideCaret
GetWindow
GetWindowLongW
IsChild
IsMenu
GetMonitorInfoW
GetSysColorBrush

shell32

SheFullPathW
FreeIconList
SheGetDirW
StrChrW
StrNCmpW
WOWShellExecute
SHEmptyRecycleBinW

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE