e0d369b72882d50de600b94168f3e147 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0d369b72882d50de600b94168f3e147
Size

123KB
MD5

e0d369b72882d50de600b94168f3e147
SHA1

c92a7d2d28f31a19381a1c2248a01cbfe8f8ff8d
SHA256

61b0183b1d76b44804034001e4640f363d8fd8017acc8f5059f7e613e43af191
SHA512

99b6a547aae762e1bffd806091f6c7b29d2d34d1a06a52a0ab5e3dc94b4090564a62aebb8fbbfff0be27d9113b1bfb4401c6a7abcee23edd77837d7b7fa54b8e
SSDEEP

3072:hMO7wgBNMXiaZNnqoCosIa7e+rpBJghrcsa:/DkVUKsIlExWrcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0d369b72882d50de600b94168f3e147

Files

e0d369b72882d50de600b94168f3e147
.exe windows:4 windows x86 arch:x86

9d45645cf2d354cb13e69a1b2038811d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OpenIcon
DrawAnimatedRects
GetActiveWindow
GetWindowDC
IsCharLowerA
CharUpperA
IsCharUpperA
CreatePopupMenu
GetMenu

kernel32

LoadLibraryA
GetProcAddress
GetCurrentThreadId
VirtualAlloc
ExitProcess
GetModuleHandleA
VirtualAllocEx
GetCommandLineA
GetModuleFileNameA

Exports

Exports

PnxyH15PMq
AXKNYxPA9N5eOk@24
MIaNPH7NJPqsZ@16
j4UjcL3Z

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text