3de5791b8fdecf24fcae404e131e76f3 | Triage

Sharing

General

Target

3de5791b8fdecf24fcae404e131e76f3
Size

77KB
MD5

3de5791b8fdecf24fcae404e131e76f3
SHA1

d3180761e5df084b823f0092d85dd1df48ff6d31
SHA256

2e325217c15603b076e3a11e707a775130c7bbb922ca114d3fbbe5f785ee39f7
SHA512

0b70f7792f92087b7706609e20954735b481cd3e11945e77a38c582c260e1a89012497defc791965202485f0b83af81b99fdf55e247fcd56e2cf2aa363f4d431
SSDEEP

1536:mkQ9TfUeMCRLLu22Y+QwmQI48XjynBuhE7Ijf5H0OB:6LMgLCnvF8X6L0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de5791b8fdecf24fcae404e131e76f3

Files

3de5791b8fdecf24fcae404e131e76f3
.exe windows:4 windows x86 arch:x86

293a087e69e907612738d4995bb51c96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Add
FlatSB_GetScrollPos
CreateToolbar

user32

CreateDesktopW
CopyIcon
DrawTextW
FreeDDElParam
EqualRect

urlmon

CDLGetLongPathNameW
IsAsyncMoniker
CopyStgMedium
UrlMkGetSessionOption
CoInternetParseUrl

kernel32

SetMailslotInfo
SetFileTime
SetConsoleIcon
SwitchToThread
TlsGetValue
WriteConsoleW

msvcrt

_ftime64
_heapadd
_iob
_ismbcl1
_futime

Sections

.text
Size: 42KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 149KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE