31902099107ab39c8786029b4fc43498e6f12878d7f37714aef14553bc5f2be2N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31902099107ab39c8786029b4fc43498e6f12878d7f37714aef14553bc5f2be2N
Size

49KB
MD5

b124a3c8617af2b9418c3bdbd734ee80
SHA1

6a7784b839dd386b57263a9d630f584fde8d1531
SHA256

31902099107ab39c8786029b4fc43498e6f12878d7f37714aef14553bc5f2be2
SHA512

452b3d10b72d786639d98b64f16e0c7b7780d4a30a2b7b95de8a8e464b7285001cb41fa97664a84c3007509bf611ad16ffcf5c74b095344d01635c2021954ed8
SSDEEP

1536:AkGjXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8nsTQtp/b9aOP:mjXRrs9sINeZEtejlIkoLN127BFVn2p2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31902099107ab39c8786029b4fc43498e6f12878d7f37714aef14553bc5f2be2N

Files

31902099107ab39c8786029b4fc43498e6f12878d7f37714aef14553bc5f2be2N
.exe windows:5 windows x86 arch:x86

0472c674d7267dab79104d29a2a3058b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
CreateWindowExA
DefWindowProcA
SendMessageA
RegisterClassA

kernel32

TlsFree
TlsSetValue
TlsGetValue
CreateFileA
TlsAlloc

gdi32

LineTo
MoveToEx

comctl32

ord17

shell32

DragQueryPoint
DragFinish
DragQueryFileA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ