881068e0e4d7f993beaeb912f9a12b0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

881068e0e4d7f993beaeb912f9a12b0c
Size

26KB
MD5

881068e0e4d7f993beaeb912f9a12b0c
SHA1

5dbe0179c48dabcfc63b244b290af116d9fa9b75
SHA256

774db49821d87ea4ba16827cc79b3f7c8c9b62193228761c46339d1431915e8b
SHA512

d6f3cf7d4ea5153915caa6b19d7cc587f3bf5dbecdb82845db531044097d932b278b94212cfb790290b1c02a40de6ceef90a8d40072cee22e3bf52f6294d0b83
SSDEEP

384:9Sp9cOe8TnRsSyn/xu9HKLlvjpqXCZ7P0Q0+vKpxUoYARv3I2ZvBHGJV:9HcnRHynJVVjpomT0Q0+CvBv42Zvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
881068e0e4d7f993beaeb912f9a12b0c

Files

881068e0e4d7f993beaeb912f9a12b0c
.exe windows:1 windows x86 arch:x86

2843a212f7a5882a5fd56256cdae7ba3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrChrW
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

PathToRegion
PtInRegion
GdiStartDocEMF
GetDeviceCaps
FloodFill
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE