539284d8488242991626ae394327a8c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

539284d8488242991626ae394327a8c9
Size

19KB
MD5

539284d8488242991626ae394327a8c9
SHA1

155f41f80188ac3980f12ef8a5715f1d18275b8d
SHA256

98ce4fffba1f7277d85bb64f10180b94514d1d8bc9f594664468746148bb8575
SHA512

815a1123168d6b7d977a229114305bc888bb817e990c55a031374c80260a05283ce0ee838e76377bd624dd9c430ca7c0ff3eeffcf627c3a07874ab5519feea25
SSDEEP

384:EZIaO7owkObWOdaKj+1O2UqNJXoVO8TT7CZAXdZ:qEMwkUHax42UqNIT3GA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
539284d8488242991626ae394327a8c9

Files

539284d8488242991626ae394327a8c9
.exe windows:4 windows x86 arch:x86

60549a228788d75089858fde730f2128

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrChrW
SheFullPathW
FreeIconList
SheGetDirW
SHEmptyRecycleBinW
WOWShellExecute
StrNCmpW

user32

GetSysColorBrush
HideCaret
GetWindow
IsMenu
GetMonitorInfoW
GetWindowLongW
IsChild

Sections

.text
Size: 1KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE