392c05f46c80305986df5d8730717d0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

392c05f46c80305986df5d8730717d0b
Size

208KB
MD5

392c05f46c80305986df5d8730717d0b
SHA1

a65dcc4e64590cfed7f30e61c524580204c2dc6a
SHA256

81d8cab48bb046551610bae1a67fdd6f3768ea97f4fce6a2cde0210906b0c2c6
SHA512

c09fe709d4a06b85e9d17ce93b93f899aa6ad55cdb60ff769b1e64ef2e72e10205a59d4b655a1e6f96aba178135c494558dc9a179a67bc364ebc2c62bbd4ce5e
SSDEEP

6144:El2/rrKoJFiHAHk+Gq3ng3l2wisTxnEJyZdSQ5DN0X:dtjiHAjlnODisxEJyZdSQ5DKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
392c05f46c80305986df5d8730717d0b

Files

392c05f46c80305986df5d8730717d0b
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE