1941eef397b56e3fd3940c5b136e4e6087162cc3dfb393904a47c30c704fd3cf | Triage

Sharing

General

Target

1941eef397b56e3fd3940c5b136e4e6087162cc3dfb393904a47c30c704fd3cf
Size

29KB
MD5

29f69a7025caee2b2f6e7169ecbcd293
SHA1

527ca5dd1506c2ab7184aa4079ffe4e414e2c79e
SHA256

1941eef397b56e3fd3940c5b136e4e6087162cc3dfb393904a47c30c704fd3cf
SHA512

2dabeb9a94acd205e8cc0edd6b5455732ff014fb6d17d82c6b05f871d2d3f8719865033afb67800bf5ed20357ef1693e46d01ced05faf9492944c76543088ca5
SSDEEP

384:uhLCP1R8XnzvuwT0pZwBeH7lQDizU11u54TV0L4S0x:cCcvuwU6eHhQDi41U4TGL10x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1941eef397b56e3fd3940c5b136e4e6087162cc3dfb393904a47c30c704fd3cf

Files

1941eef397b56e3fd3940c5b136e4e6087162cc3dfb393904a47c30c704fd3cf
.exe windows:5 windows x86 arch:x86

0472c674d7267dab79104d29a2a3058b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc

gdi32

LineTo
MoveToEx

comctl32

ord17

shell32

DragQueryPoint
DragFinish
DragQueryFileA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ