465e3d910e8d02b670cd9267ab207730 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

465e3d910e8d02b670cd9267ab207730
Size

138KB
MD5

465e3d910e8d02b670cd9267ab207730
SHA1

a6e7f15202f7dc7eae55b5a65119fbcad373dc61
SHA256

f1848dbce79e675ddfac966dd8305bcd09610c728fcb892c777d349133d7d05f
SHA512

23967e152bb01f80e44d126c98eabf427d704fd1ff89a3d055d48d53d59553c6bfd80c172d6354b15377917708a64065664d39c34d3e01025eec38a1b125da2e
SSDEEP

3072:avVRm1kgzmuEkTUdjgchJsHfMrbv+MdBN+RT3vGm4sIBdlJ/XAY7:mVRQ0kTUxgYs/sFdBNO/GmsTl7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
465e3d910e8d02b670cd9267ab207730

Files

465e3d910e8d02b670cd9267ab207730
.exe windows:4 windows x86 arch:x86

c3e5b18e8b056ce353ce73e27657435c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHLoadInProc
DragQueryFileW
ShellAboutA
ShellHookProc

comctl32

ImageList_GetImageInfo
ImageList_SetBkColor
ImageList_Write
LBItemFromPt

ntdll

LdrLockLoaderLock
LdrSetDllManifestProber
LdrShutdownThread
NtAlertThread
NtClearEvent

kernel32

GetConsoleCursorInfo
GetConsoleCP
GetStdHandle
FreeResource

Sections

.text
Size: 63KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE