e2243613f13b4f05695ae3c375b8b011 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2243613f13b4f05695ae3c375b8b011
Size

172KB
MD5

e2243613f13b4f05695ae3c375b8b011
SHA1

3b2ebd1ee2f9e63293c5cc07199de86ea2ab71a5
SHA256

30ff695438337a1ba2f4563a68627b6d9373571b286ac39ad672e17eb19c60d2
SHA512

ef89e89e8a814215f9949e6c3b356836ff6ce3089d8094c4e5ed8c67d18cdd425ee63571a79f357c0dc8d3bd0362d170c32bb2319d8dfe9d65f710f5b1b3bb90
SSDEEP

3072:kbx620IkDUW8TWDMdNKcCHp0hqFIsISKfCPerZzO4pIuAB4MEbPW8pS:kD0IHe/pqmhI/qqZzO4+DB4nP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2243613f13b4f05695ae3c375b8b011

Files

e2243613f13b4f05695ae3c375b8b011
.exe windows:4 windows x86 arch:x86

4c1f9accd37f48933a2b049d81cd036e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSetInformation
CreateFileA
lstrcpyA
GlobalUnfix
ReadConsoleInputW
GetMailslotInfo
RemoveDirectoryA
lstrlenA
CopyFileA
GetCompressedFileSizeW

user32

GetMessageExtraInfo
ExcludeUpdateRgn
EnumDesktopsW
DdeCreateStringHandleA
OpenClipboard

gdi32

Ellipse
GetKerningPairsA
SetStretchBltMode
InvertRgn

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE