496f8e9168e5bdf34fa2a6d53de6ace0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

496f8e9168e5bdf34fa2a6d53de6ace0
Size

73KB
MD5

496f8e9168e5bdf34fa2a6d53de6ace0
SHA1

aa7b0fe73d5e247b22b6b802accdb876602e2ff6
SHA256

5b73ae025f26e1ea02eb935be459cc554246d2996c89596e4786b8f1600f401c
SHA512

0fc04b4e102467474040cbc6f9d4ca4d92e17449bc73ef0adc28cf0b688f438f124291d871df5f28efd6e705e4e4db7ad1260edde24f9f8394891c82503ef14c
SSDEEP

1536:MiuVDgY08B3gIDHg47epUxWdG3av2RfOCs96WXqgq8fgv:MiuVEPIDA4CHgw2RfTsLXqBv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
496f8e9168e5bdf34fa2a6d53de6ace0

Files

496f8e9168e5bdf34fa2a6d53de6ace0
.exe windows:4 windows x86 arch:x86

bde266f7c0afc1c4db69c41f0588e90c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_errno
_unlock
__dllonexit
_lock
_jn
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy

kernel32

GetProcessHeaps
HeapCreate
HeapSize
GetStdHandle
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime

gdiplus

GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ