400d4bd54166b5efbdec0811c6df3d9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

400d4bd54166b5efbdec0811c6df3d9b
Size

17KB
MD5

400d4bd54166b5efbdec0811c6df3d9b
SHA1

9bebe6abebf6c8b4071acdb551188f600671134e
SHA256

16f40f99f9ba1567549ebd569e1b3d44ee7093c4bc8d680aa4788cd518226075
SHA512

e98e5bf6d4394e222d1df4b4fc779ef81c2eb1550a34d9e011dacef634e46f6f1e69f81539fd5f4221b94d10ef9a70bc9688b60dd55b17d81cce95a70c821f0b
SSDEEP

384:d+fOqZp9GC9PzmKWlGibBI48B/Hrg9ygEHs:M2z8zmHltBc/HIyvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
400d4bd54166b5efbdec0811c6df3d9b

Files

400d4bd54166b5efbdec0811c6df3d9b
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ