291c4841e3eb031d12df9d64d8064d60N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

291c4841e3eb031d12df9d64d8064d60N
Size

170KB
MD5

291c4841e3eb031d12df9d64d8064d60
SHA1

780ed615de9cc14b816a69576307d09541bc8aec
SHA256

0ab1d7f2ee2169293ccdb9dbce64b0d985151a9f938c7f52ad47b8ca048b129a
SHA512

1c370beed0643474b22c902460df039122c098a82b1cb28ce405009aa26cad925ead31f0a99e91f2db09b3d9c2bc8648b3cd27327863c38c3c0cca4e8208fbb3
SSDEEP

3072:bzeWnDkuNCKApyhdGF6CTchNQNT67dIexWZDjHcCep5SqOF:WWnYgRAoc6+sz7KjDzcNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
291c4841e3eb031d12df9d64d8064d60N

Files

291c4841e3eb031d12df9d64d8064d60N
.exe windows:4 windows x86 arch:x86

5f244c5595e3a49e08f10fe6bbbe7881

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetLastError
CreateFileW
GetHandleInformation
LoadLibraryW
GlobalFree
GetCurrentProcessId
EnumResourceTypesW
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
UnhandledExceptionFilter
GetModuleHandleW
GetVersionExW

user32

SetCursor
IsWindow
RedrawWindow
EnableWindow
LoadCursorW
ClipCursor
TrackPopupMenuEx
SetWindowPos
DestroyMenu
InvalidateRect
GetDesktopWindow
SetParent
CreatePopupMenu
GetFocus
PtInRect

msvfw32

ICClose
ICOpen
ICSendMessage
ICDecompress

ole32

StgCreateDocfile
StgOpenStorage

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ