463e7a517e1400126b90c90f3d043a29 | Triage

Sharing

General

Target

463e7a517e1400126b90c90f3d043a29
Size

30KB
MD5

463e7a517e1400126b90c90f3d043a29
SHA1

e1683c15880f7a3f7f4ed96ce08630656f24db5d
SHA256

87eec3bbc7ed97a2d26c105ba33241488549bd356372a71033f3a8a62b21bf69
SHA512

b0b1bc0076b9da29e5dc614fcca044ae19bd189b663a0f066522e0809b6f9233ef6fb965b3452ff6e6e42404a89b11f36b996d27af699899ad655c228837a0f8
SSDEEP

768:rCFyqSfwe96K1SYoMfX8OeYgufI9IY/Sm9:rBq6p+YXInuC/Sm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
463e7a517e1400126b90c90f3d043a29

Files

463e7a517e1400126b90c90f3d043a29
.exe windows:1 windows x86 arch:x86

adc63c2c47604cacb331e8a09625f7cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
dwLBSubclass
GetSaveFileNameW
PrintDlgW
ChooseColorW

gdi32

Ellipse
ChoosePixelFormat
CreateEnhMetaFileW
CreateSolidBrush
DeleteMetaFile

Sections

.text
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE