b61e08b3dd187dfb5fb6b8efae97f5fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b61e08b3dd187dfb5fb6b8efae97f5fe
Size

22KB
MD5

b61e08b3dd187dfb5fb6b8efae97f5fe
SHA1

cffc2e435cb34099ddab43ca4f4c046906b30abb
SHA256

e524f235a35fdad622b0beae8077685a4b8b209dfa4b5dc71be1bd65b69fabcc
SHA512

65d2e029b7cd40381b63d48d42486ff864b1035bde121663fb22b2cf08db627893a3b28cd9b1ece341b4125d10a0a7c9d6af9916eb630360abd4dae022fb9fdf
SSDEEP

384:1Q8g/lM06zFTwfFPgQjRWB/a7/tGZdblFpmKMX6DpP90Ta4fFwbm:1Q8+M06zFwP11W5W/q1VzpP90TFFym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b61e08b3dd187dfb5fb6b8efae97f5fe

Files

b61e08b3dd187dfb5fb6b8efae97f5fe
.exe windows:1 windows x86 arch:x86

af76398e982e0d9c46c7858d9779590a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateCaret
EndPaint
GetActiveWindow

shell32

ILClone
ILFindChild
DAD_DragEnterEx
PathIsSlowW
PathResolve
SHFileOperation
SHGetNewLinkInfoW

gdi32

CreateCompatibleBitmap
DrawEscape
CreateColorSpaceW
Escape
FillRgn
GdiFlush
GdiPlayJournal
CreatePen
GetBkColor

Sections

.text
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE