c91ff997510decf012d3f0955a46d5b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c91ff997510decf012d3f0955a46d5b3
Size

23KB
MD5

c91ff997510decf012d3f0955a46d5b3
SHA1

4f1ab9bfe554c312e27eb4e272611c3fc013a7f5
SHA256

dedf641bf21c3219b5d20d2398c32e97b1acc00432d922dd2171de60b7130b38
SHA512

ac3b051b49355e5e8b3b80531c22c70508b52a9148b4d98084ebc4c446006c43482c49dbadbc876a990540f2ba443bc297fdc753ce14b7155e22960e0025b156
SSDEEP

384:+ALS1Y863Ch2cpdyRMe/vj+yE3gq6Gap1mtlH6nfeNkQcmxusNMtc882dvm:+OS1N2P/y3mRylaGC5JsNO18am

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c91ff997510decf012d3f0955a46d5b3

Files

c91ff997510decf012d3f0955a46d5b3
.exe windows:5 windows x86 arch:x86

50c5e5fa48ba0d0fb395727a829f46bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringA
FormatMessageA

user32

SetWindowsHookA
MapVirtualKeyA
ChangeMenuW
LoadMenuA

gdi32

DeviceCapabilitiesExA
GetTextMetricsA

Sections

.��
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 11KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ