92c93881a4813ef3dc1ff7f8de573610N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

92c93881a4813ef3dc1ff7f8de573610N
Size

20KB
MD5

92c93881a4813ef3dc1ff7f8de573610
SHA1

cfe906870c015f7bf229ad694d39f10d4d19b081
SHA256

36f317d64e947e0aa28478951182c6f179ad2a2730f25e072e4ba1ffe54ea601
SHA512

7c4bcb7d57251a515bfb5ee8b199d4806ae392824d9cb1c8b66da59ea325577b40b65e11f42a08ab07f43f838b32ba8911aa085e4ffe5394288c272e835a2bba
SSDEEP

384:OI/t6vqxuhenoPYpr/LjggggggLvggggggggUaocl+:O2tmhSsYvggggggLvggggggggUaocY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
92c93881a4813ef3dc1ff7f8de573610N

Files

92c93881a4813ef3dc1ff7f8de573610N
.exe windows:5 windows x86 arch:x86

c2d1423eb41bae4ad3148b856cdcba22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

LoadIconA

comctl32

ord17

shfolder

SHGetFolderPathA

shell32

DragFinish

msvcrt

exit

Sections

.MPRESS1
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE