591a45a3b664d9141b2ebe45fb0d7341 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

591a45a3b664d9141b2ebe45fb0d7341
Size

108KB
MD5

591a45a3b664d9141b2ebe45fb0d7341
SHA1

b620914115bd3972ad539475d970a5d1724d5701
SHA256

41778570d194e36e66e5ec7486e9ca58dbc5786b2965a96d779a10eff450368a
SHA512

17d250d024d8b0281aa413e959202183c4339e748e919a3a777749146458bf3a5541ff0e3f09aa5c6a2f383a18fb9466029cdfd7eccce04eee72c4c57bb8fa31
SSDEEP

3072:tDOQ2woB6UCNncVGrmzLU/JkYPvdFauix:lUwoSncVpzI3Pvd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
591a45a3b664d9141b2ebe45fb0d7341

Files

591a45a3b664d9141b2ebe45fb0d7341
.exe windows:4 windows x86 arch:x86

37930b8284e5213868aeeba1e017794a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle

comctl32

DPA_DestroyCallback
DrawInsert
FreeMRUList
DrawStatusTextW
DPA_Search

Sections

.text
Size: 75KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE