e1e295a414701e3d94d176455b75ab13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1e295a414701e3d94d176455b75ab13
Size

63KB
MD5

e1e295a414701e3d94d176455b75ab13
SHA1

500775cce986fdbf277f64625ad4d228a2aa9aba
SHA256

72609838f6b14af903513c3c6b1748f0bcb9988a7af1d2b895167bbeb7025dda
SHA512

fdba3c007638e4ec7c0f2c1375f848a4f4772215eb6dbc6fbfb81a23834dbfb195a0883329e9dae4f32bef134be78a57f8b184717b9426ca3223ecfdb3ebbf95
SSDEEP

1536:x39hMXLmGgGvsYzAqQH5BzGAcGTVYtyPSlbCr:xNhMXLmnGv1AqE5MCSty6lu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e295a414701e3d94d176455b75ab13

Files

e1e295a414701e3d94d176455b75ab13
.exe windows:5 windows x86 arch:x86

7117932e13f139fdfc10fca459407204

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GdiPlayScript
GetBkMode
GetClipBox
GetFontData
GetMetaRgn
GetPath

kernel32

GetConsoleMode
LocalFree
MulDiv
SetupComm
IsBadWritePtr
HeapSummary

user32

CallMsgFilterA
CopyRect
AdjustWindowRect
CreateIcon

Sections

.whsj
Size: 33KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xwh
Size: 1024B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ivof
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fwx
Size: 24KB - Virtual size: 60KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE