39a1eeb778d3a9447864a6536ce68a1d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a1eeb778d3a9447864a6536ce68a1d
Size

67KB
MD5

39a1eeb778d3a9447864a6536ce68a1d
SHA1

01bf1f3308523971e91c2efedcdaba4379455c10
SHA256

30380154d4069a4302461f71e00c06544078dd944e62b4fd90b48ee1f6d4712a
SHA512

06300cb0610674e624c9fc0cc62b71cbeec0d12132b2eca1e8d11f5c3d0e297997f563c01e01661cdbf57bb7a6ece396cd7d2887b2cd09b56c593e7ccd9ae610
SSDEEP

1536:4579ucrFmJQqO3VhDWiC+i6Q/j337uTNqfQ3bACLdsRz6vYu:IxmJQqO3VpWiC+i6QuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a1eeb778d3a9447864a6536ce68a1d

Files

39a1eeb778d3a9447864a6536ce68a1d
.exe windows:5 windows x86 arch:x86

64ae6f7ad7b9fe42fe92f6ebc5207506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCloneImage
GdipDisposeImage
GdipFree
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipCreateFromHDC
GdipAlloc
GdipGetImageWidth
GdipGetImageHeight
GdipBitmapGetPixel
GdipDeleteGraphics

kernel32

LoadLibraryExA
HeapAlloc
lstrcatW
OutputDebugStringW
LoadLibraryA
LoadLibraryW
FindResourceW
LoadResource
SizeofResource
LockResource
VirtualAlloc
VirtualFree
FreeLibrary
GetProcAddress
GetCurrentProcess
GetProcessHeap

user32

ReleaseDC
BeginPaint
GetDesktopWindow
EndPaint
wvsprintfW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ