e01729cb34e88a5d223cb329efad76f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e01729cb34e88a5d223cb329efad76f4
Size

180KB
MD5

e01729cb34e88a5d223cb329efad76f4
SHA1

5a40264fa7156f48cc5d20a64b2d06e65d81f34b
SHA256

dd7b4a55316be5ef1b960ccec479c2f120fbed747585308f6a191e03be4b8b7e
SHA512

cf1ad202daeea802afbcaf39078c393ac19c020c770bbde0aac6e187658c418a4504f5a41dd4c32049e98fb216373f828abd8c4fa451bd6c17cd660740a7c942
SSDEEP

3072:Imwo/t7Nkl0bJFBnq/aUYzg/D5xXe0IhzxA/bnlYU18fSKEeC8t:Imp/HkSBnq/aUks5+zx4YU18f9C8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e01729cb34e88a5d223cb329efad76f4

Files

e01729cb34e88a5d223cb329efad76f4
.exe windows:4 windows x86 arch:x86

5246e4f98ab0019378b8f4223f77ba3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetRectEmpty
InvalidateRect
GetWindowPlacement
PostMessageW
AdjustWindowRectEx
GetClientRect
SetCursor
FillRect

kernel32

GetLongPathNameW
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
SetThreadContext
UnhandledExceptionFilter
GetLastError
EnumResourceTypesW
LoadLibraryW
ExitProcess
GetModuleHandleW
GlobalFree
CreateFileW
GetProcAddress
GetVersionExW

msvfw32

ICClose
ICSendMessage
ICOpen
ICDecompress

advapi32

RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegCreateKeyW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ