9782661b329bdfe6722ea5191d90187f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9782661b329bdfe6722ea5191d90187f
Size

172KB
MD5

9782661b329bdfe6722ea5191d90187f
SHA1

fe7bf622cf14fbe3e7f0f2f124c24ade028d00fc
SHA256

26e1c5759a452ec315a23ca6e9d897c8265d883d951a86cd2912e7c04000e3cc
SHA512

a4f9c4581a4642be2e3e3103ab6cba03dd6555e3831d4518583118a7152466167f14821ad877ce67ead071acbe2b2551441c7a7976755bf742e4ed9c87097ae4
SSDEEP

3072:74bt/Ch6Kc/mJ/R1hmodmmXipV6b/vK4Uy1oDYWY8SKuEA:7u0MO9mzV6b/vl5rWmEA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9782661b329bdfe6722ea5191d90187f

Files

9782661b329bdfe6722ea5191d90187f
.exe windows:4 windows x86 arch:x86

8a139bcd428e1ff2f7611fe30a8f7ca4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
GlobalGetAtomNameA
SetStdHandle
VirtualAlloc
TlsGetValue
MultiByteToWideChar
GetLocaleInfoA
RtlUnwind
HeapSize
GetCPInfo
GetDateFormatA
EnumResourceNamesA
WriteConsoleA
GetOEMCP
HeapReAlloc
TlsSetValue
GetConsoleOutputCP
CreateHardLinkA
GetTimeFormatA
GetACP
SetFilePointer
TlsAlloc
RaiseException

shell32

SHGetFolderLocation
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderLocation
DragAcceptFiles
ShellExecuteExW
SHGetPathFromIDListW
SHGetDesktopFolder
SHAppBarMessage
Shell_NotifyIconW

occache

FindControlClose

Sections

.text
Size: 82KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ