278e51e29ba6cda6204ace182757577a372269bc30578cebec9680e6de4fcf40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

278e51e29ba6cda6204ace182757577a372269bc30578cebec9680e6de4fcf40
Size

60KB
MD5

b87b374bd3132ab10c93dd24b8986cd9
SHA1

ad5005dca84d2413a618c2da24e886af46a98da5
SHA256

278e51e29ba6cda6204ace182757577a372269bc30578cebec9680e6de4fcf40
SHA512

0902b4e227deb339041af2bfa4ab5368f1f1f10e1815c3f94afceb54ba126af8ce94ef489f1c3c8b337fc971b167d63b7dd9c04577ed30a462600703d7004561
SSDEEP

1536:AkGjXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8nsTQtpsWME0YLA8Pd:mjXRrs9sINeZEtejlIkoLN127BFVn2pS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
278e51e29ba6cda6204ace182757577a372269bc30578cebec9680e6de4fcf40

Files

278e51e29ba6cda6204ace182757577a372269bc30578cebec9680e6de4fcf40
.exe windows:5 windows x86 arch:x86

0472c674d7267dab79104d29a2a3058b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc

gdi32

LineTo
MoveToEx

comctl32

ord17

shell32

DragQueryPoint
DragFinish
DragQueryFileA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ