38901dc99db23a66ce4e357ebfa0ab5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38901dc99db23a66ce4e357ebfa0ab5b
Size

177KB
MD5

38901dc99db23a66ce4e357ebfa0ab5b
SHA1

24305b26abdd1b7555a9ba2ab0ef127649ff306e
SHA256

735f46490bbefdf2de4eaa213de506fd188e3640405f9643cd09bacc0a9e3d24
SHA512

97e58ad01fbba7be1f967e8a58a0d8a56089e620497ae3b76b29274f0c9eb4df807fd9c08042fa9a795ed6e5b89e7c332f27cf569774a5e61c0b608db6c10c37
SSDEEP

3072:Oc+x25qHVQJsoObvHIsRonmXf7+bhDIAz2XUQyEjU5PzgXjw:O9D2JsoSfIsR2mXfq/iXUGoz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38901dc99db23a66ce4e357ebfa0ab5b

Files

38901dc99db23a66ce4e357ebfa0ab5b
.exe windows:5 windows x86 arch:x86

1c94c1931353dcb5f92245a3258f87ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageTimeoutA
ArrangeIconicWindows
CreateCaret
CharPrevW
CharToOemW
DefFrameProcA
GetWindow
IsCharUpperA
PeekMessageA
SetScrollInfo
CreateIconIndirect
GetClassInfoA

comdlg32

ChooseFontW
FindTextW
GetOpenFileNameA

msvcrt

wcscmp
fseek
wcspbrk
swprintf
fputc
towlower

gdi32

SetTextColor
IntersectClipRect
TranslateCharsetInfo
CreatePolygonRgn
GetTextColor

kernel32

CreateSemaphoreA
LocalAlloc
lstrlenW
UnmapViewOfFile
GlobalCompact
GetVersionExA

ntdll

memset

shlwapi

PathMakePrettyW

Exports

Exports

?yhkkdeSq@@YGKPAIPAI@Z

Sections

.itext
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 142KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

CODE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ