e228d32c9d49f5af58df640b8d075772 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e228d32c9d49f5af58df640b8d075772
Size

55KB
MD5

e228d32c9d49f5af58df640b8d075772
SHA1

d94f3c8d3abb43a78c5df953eec8d9bbdf8bbabd
SHA256

677e15a526b443c9655e24eded216e5a21cde6384bece0cd0cb9139655189765
SHA512

1ca0e77eed548b31cf0854b5367bf7f46251048d84b8ecb4e68fe12c9969e946023d00cecdc0db1c15f0fe2addaa55d9c094b37bbbae05fdbb223c76122986f8
SSDEEP

768:33fPYrKcTw+lqvdu/c+7BLbC4kzSk+WdXpfmjxrvHREtvI2MMLpq:3vs/wZvdGc+tPC4kzx+CqxDHIE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e228d32c9d49f5af58df640b8d075772

Files

e228d32c9d49f5af58df640b8d075772
.exe windows:5 windows x86 arch:x86

9b2471e86bd8d2c58452a97f9e30e58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapAlloc
VirtualAlloc

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ