d63930dbe074412c804193b01023be0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d63930dbe074412c804193b01023be0d
Size

119KB
MD5

d63930dbe074412c804193b01023be0d
SHA1

96c5f72abbb49c0765860fe61a233af889020397
SHA256

93d720ed400196b7ef8e93f1055446656ec94fe024ba2230fd9ee53e662aed3e
SHA512

4b6b714d679cd4a994fc5dcb3abd38460276bf576993da3f053d2c157963cd534a4b5b8846cfa5a1cb335b472b471c38822e00aa14b6534b05979c7324807494
SSDEEP

3072:vL+V1XopoTCvMCMkwxxzhCL40USW/ezrM8TCgxc09weGA:6VRopoTC8ULgjmc8TCgTR5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d63930dbe074412c804193b01023be0d

Files

d63930dbe074412c804193b01023be0d
.exe windows:4 windows x86 arch:x86

3f2b57379bf704dd9519e4501a2aad1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

ReplaceTextW
CommDlgExtendedError
FindTextW
ChooseColorW
GetOpenFileNameW
dwLBSubclass

gdi32

GetEnhMetaFileW
GetFontData
GetMapMode
GetClipBox

Sections

.text
Size: 73KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE