30324babc75303a10f80730b28e4d4d9e843eea9815d998f40c9e96e6ecd0f45N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30324babc75303a10f80730b28e4d4d9e843eea9815d998f40c9e96e6ecd0f45N
Size

25KB
MD5

7e05c4eeb5618eb422f41cf6eaa510b0
SHA1

7b76c97a89ebaafe3d67ebc1bd3804f6336929bc
SHA256

30324babc75303a10f80730b28e4d4d9e843eea9815d998f40c9e96e6ecd0f45
SHA512

fed040fb2cf8a31ee047d08a91f6f6f6e1f8ec23e9e24d62308206c252ab207513a2c737a899eb219022d9920cca9963593c6b51837d5440dfba2572214c02c7
SSDEEP

384:vm8As8DusiHokD2Td/9YIK2y5S4wVc3JdAhvrhzaFmDcSAU26zP6AG0nL:vzA/uxDy5jN1GFmDc3P6eK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30324babc75303a10f80730b28e4d4d9e843eea9815d998f40c9e96e6ecd0f45N

Files

30324babc75303a10f80730b28e4d4d9e843eea9815d998f40c9e96e6ecd0f45N
.exe windows:1 windows x86 arch:x86

64e4956b65f68eeee6c31364abcd60ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetModuleHandleA

shell32

DragAcceptFiles
DragFinish
DragQueryFileW
ShellAboutW

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
LoadIconA
RegisterClassExA
TranslateMessage

comdlg32

ChooseFontW
CommDlgExtendedError
FindTextW
GetSaveFileNameW
PageSetupDlgW

Sections

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ