e3153f671a58f702a772b78a0c39f5423181fb57a6ecf85b74bb25efe3904d64 | Triage

Sharing

General

Target

e3153f671a58f702a772b78a0c39f5423181fb57a6ecf85b74bb25efe3904d64
Size

16KB
MD5

ae62bc142af07a8c0228b5dbedda658a
SHA1

711a9657b87ba19a4b7cb7b631c2c83120378e35
SHA256

e3153f671a58f702a772b78a0c39f5423181fb57a6ecf85b74bb25efe3904d64
SHA512

659832ec0719c1aebf39ad980109c0a5a50f3f05b15f81a5dd6b95a8e96f17914c634be618e5f95a37ffe5b133ca550971368e18a0fa8c944573ac71c5aaac58
SSDEEP

384:hIRtWeUocPmD47Z0cUpFCYxb/CA2ruBUnI:hIRWocPmD47Z0cYDxGzuBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3153f671a58f702a772b78a0c39f5423181fb57a6ecf85b74bb25efe3904d64

Files

e3153f671a58f702a772b78a0c39f5423181fb57a6ecf85b74bb25efe3904d64
.exe windows:6 windows x64 arch:x64

9ba137f581763a6b94a5b2d01f5de03f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

WaitForSingleObject
GetModuleFileNameW
CreateThread
ExitProcess

user32

GetMessageW
TranslateMessage
ReleaseDC
PostMessageW
DefWindowProcW
RegisterClassW
CreateWindowExW
LoadCursorW
SetProcessDpiAwarenessContext
ShowWindow
GetDC
UpdateLayeredWindow
EnumDisplaySettingsW
SetWindowPos
DispatchMessageW

gdi32

CreateCompatibleDC
CreateDIBSection
SelectObject

shell32

ShellExecuteW

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ