d52714d0361c5453aeb18ecebf1faf88 | Triage

Sharing

General

Target

d52714d0361c5453aeb18ecebf1faf88
Size

162KB
MD5

d52714d0361c5453aeb18ecebf1faf88
SHA1

e2af6fe7073c3484d2120e1a61adddd9bb45812e
SHA256

4a27e68e8e88f5fef617f922f84617e00e7409c85ce91c35b34145affab35c0e
SHA512

5636e2c3a71d4013714a226e62563a76aed3f93bb4d286e157b69f82b5b292134efef3d088972beccba135de057ae840560dfd7de2958472b78a00129c073b79
SSDEEP

1536:0vn9DmOPj3/EyIR1Y+IjIVZgFNyifN/E3+gHurSwzMpE1gNYlVLNu:0l3TIR1YzNy8E3+dGna1rLNu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d52714d0361c5453aeb18ecebf1faf88

Files

d52714d0361c5453aeb18ecebf1faf88
.exe windows:4 windows x86 arch:x86

08bbff5b021726a49f9a3223ac14a478

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

OleLoadPicture
SafeArrayGetElement
SafeArrayUnaccessData
SysStringLen
SysReAllocStringLen
SysFreeString
RegisterTypeLib

comctl32

ImageList_Remove
ImageList_Add
ImageList_Create
ImageList_GetBkColor
ImageList_Destroy
ImageList_DrawEx

user32

GetForegroundWindow
CharUpperA
GetActiveWindow
GetDesktopWindow
GetMenu
KillTimer
GetWindow
GetFocus
GetDlgItem

kernel32

LocalAlloc
VirtualAllocEx
SetLastError
ExitProcess
SizeofResource
GetOEMCP
LoadLibraryA
SetThreadLocale
VirtualAlloc

Exports

Exports

ph4mSX@4

Sections

CODE
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tpdata
Size: 512B - Virtual size: 394B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eedata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ