488a2c9ae032731b5bebb119e6894674 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

488a2c9ae032731b5bebb119e6894674
Size

16KB
MD5

488a2c9ae032731b5bebb119e6894674
SHA1

3aa502a7bd301c8275d56e46544e7b355f9d08bb
SHA256

e562e3aa4b059f624c7e46d0f1e6b3373cf7bd02368643cfd378890dc2c0971a
SHA512

fc1caa78e1b51b4e59dd91f63f41bffc76d6bfe8158c44a9acbbd18f022968fba863867d42647f16ba3b92e0de8045686d742a6b6b89e48606eb9b5690e5156f
SSDEEP

384:vnEwQW4HQvEf0Hp00Ikg+67X9rpK8vAc9:vtQvHQvE8J07NrpK8I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
488a2c9ae032731b5bebb119e6894674

Files

488a2c9ae032731b5bebb119e6894674
.exe windows:1 windows x86 arch:x86

313a383c9ffd446a1d956ebd8fbe8a9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW

gdi32

CreatePen
EnumICMProfilesW
Chord
DPtoLP
ExcludeClipRect
BitBlt
Arc

shell32

SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW

kernel32

GetStringTypeW
GetModuleHandleW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle

Sections

��t
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE