5431cae82767cdb38b2e7ebc09853d3e110ba241ce28650885ffae88df45a87e | Triage

Sharing

General

Target

5431cae82767cdb38b2e7ebc09853d3e110ba241ce28650885ffae88df45a87e
Size

20KB
MD5

b223e1e2de415cea208d7bac3dd47303
SHA1

018f89eb85b163f2172c3756a70b4ab342883b71
SHA256

5431cae82767cdb38b2e7ebc09853d3e110ba241ce28650885ffae88df45a87e
SHA512

1f5c6783894a5314833bb798a9c801bb9345384b2c699175c53bcff87c5b90a8a9fb69dec88154930fad524d82ea70715af9cc7b8d18743f05308bc7019295a2
SSDEEP

192:itxkDDYd9X9lr51ZaYHULSdSfiCetbpE1eEE1RsocnavkFqKTYcB57zQQXU0j/:gxNlDZnUShCkFIZocXLnB5vUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5431cae82767cdb38b2e7ebc09853d3e110ba241ce28650885ffae88df45a87e

Files

5431cae82767cdb38b2e7ebc09853d3e110ba241ce28650885ffae88df45a87e
.exe windows:4 windows x86 arch:x86

73f03e1b671aa0bd1520dce7446a8a13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
GetClientRect
DispatchMessageA
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA

kernel32

HeapAlloc
GetStartupInfoA
GetModuleFileNameA
GetCurrentThreadId
CloseHandle
GetModuleHandleA
LoadLibraryA
lstrcpyA
GetProcessHeap

comdlg32

GetSaveFileNameA
GetFileTitleA

comctl32

ImageList_Add
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

ole32

OleFlushClipboard
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ