38e11adbc07bd32bf5159bdac1f4788e | Triage

Sharing

General

Target

38e11adbc07bd32bf5159bdac1f4788e
Size

264KB
MD5

38e11adbc07bd32bf5159bdac1f4788e
SHA1

650a205cf54b64d9bc5bcddf65595dd0c18d76cf
SHA256

1c58a3e251141732bc27e6f058625ff14c46b79af02f907f535ce3200d241a75
SHA512

7ab6e7dca0ed92ef6349fd8bd713cd09c57bc9227e847b974e6674838ff9423a27e42029a89529c079c7f19f448aaec227bdebee76d9945d09077c0e7d9bdbc7
SSDEEP

6144:dIlUbo4dxbVMGA1nOS/j07lKLiAeBRuRMMDngtinmv7LoIl:dGULxBy1OS7u4eAeBRkMMctxzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38e11adbc07bd32bf5159bdac1f4788e

Files

38e11adbc07bd32bf5159bdac1f4788e
.exe windows:4 windows x86 arch:x86

6eea12f96851b06b55a2272bc5b9397b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetStartupInfoA

user32

DestroyWindow
GetWindowRect
EnableWindow
CloseWindow
OpenClipboard
MoveWindow

gdi32

CreateDCW
GetDeviceCaps
CreateFontIndirectA
FrameRgn

msvcrt

__setusermatherr
_controlfp
strcmp
_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ