6436e2dd2f595e81dfd3ffd387b510af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6436e2dd2f595e81dfd3ffd387b510af
Size

63KB
MD5

6436e2dd2f595e81dfd3ffd387b510af
SHA1

70315d4ce6c8dfe8c5c1dc12c7295edc36148fd9
SHA256

c250e9a47961d9c1d1dca8b52d03eb3c5c85c36112ec767a4b0ba02c030ba446
SHA512

da85120d1e423665d3923f70fbf49eee0b7cc3fe680238e1fe433a602f0ebb5460ae5c763ec807bfb961aa4a08ca7c197d4f9a8428c3e4a31c77a9d289b341ec
SSDEEP

1536:/VNCBe5SPg3OpydRAwGO2vywOO2YlwBkayqyFA37LB:db5SPByrlOawL69yqyFALN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6436e2dd2f595e81dfd3ffd387b510af

Files

6436e2dd2f595e81dfd3ffd387b510af
.exe windows:4 windows x86 arch:x86

98ae6977a137c0cf8f50222473beb229

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragShowNolock
ImageList_Draw
ImageList_DrawEx
ImageList_Remove
ImageList_Read
ImageList_Create
ImageList_GetBkColor
ImageList_Destroy
ImageList_Add
ImageList_Write

gdi32

GetObjectA
CreateCompatibleDC
CreateCompatibleBitmap
CreatePenIndirect
GetBkColor
GetTextAlign
CreateBitmap

user32

SetClipboardData
SetClassLongA
SetActiveWindow
SetCapture
OpenIcon
GetDesktopWindow
LoadBitmapA
SendMessageW
CreateMenu
GetMenu

shell32

SHGetDesktopFolder
SHGetFolderPathA

kernel32

IsBadHugeReadPtr
FindResourceA
FreeResource
LoadLibraryA
FindFirstFileA
VirtualAlloc
ExitThread
FormatMessageA
FreeLibrary
FindClose

Exports

Exports

I9VYXO3@24
CMImP
_f2sNuV4cyrd

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ