b197c3beeeed9cdb1dfad7703eae6e3b7092a9b626a2f3e33fd8f909ed767018 | Triage

Sharing

General

Target

b197c3beeeed9cdb1dfad7703eae6e3b7092a9b626a2f3e33fd8f909ed767018
Size

26KB
MD5

81eafbe475b5d1a893f23c66ebd82e62
SHA1

6b9a504a5bef5b519182fd50d00f996207247544
SHA256

b197c3beeeed9cdb1dfad7703eae6e3b7092a9b626a2f3e33fd8f909ed767018
SHA512

992176a59006c22bd70dc975758fb649ccb479621ddabf80a7dfb2e19fdb50d9077b9db642ca83c5f6a1446924a34e811f6a5fc1460f518f09db725bbbd1637d
SSDEEP

384:+7ZfapsmVHgRK/rJ1OetA8gA49lBrenVyG+txHBtNsmSJJEFk+z0yMm:OpgTARK/rRggVGhBRAEy+zbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b197c3beeeed9cdb1dfad7703eae6e3b7092a9b626a2f3e33fd8f909ed767018

Files

b197c3beeeed9cdb1dfad7703eae6e3b7092a9b626a2f3e33fd8f909ed767018
.exe windows:4 windows x86 arch:x86

5bdbfadc30986867f14f8da3f77b42ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
MessageBoxW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetFileSize
CreateFileW
CloseHandle

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ