532275daf86eb2ac051873d6a7e4c15f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

532275daf86eb2ac051873d6a7e4c15f
Size

58KB
MD5

532275daf86eb2ac051873d6a7e4c15f
SHA1

c62b5d0defc0c1253ae04a7ba7614c5f6c1185ae
SHA256

00325c49cbbc9c7afdc8c79edba56e4cbf9eabe19bc2b49985cc8f5b103e88a9
SHA512

547e8d653ecb567bf06ff888d916e73b94fbf3b2fb035e281f805eabb94042e17d4875f05acb46b7afd18bfc62823f2e41e2bd763e4d9273c6fa374e3e238212
SSDEEP

1536:uoLxGGLFOFSX/y3Vc4hapVdllfslc/c/bc:uoLxGGLFOsX/y3G4hapVdlVOcU/bc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
532275daf86eb2ac051873d6a7e4c15f

Files

532275daf86eb2ac051873d6a7e4c15f
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE