4056da8081ef45527b1cbbf2996d7fbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4056da8081ef45527b1cbbf2996d7fbb
Size

480KB
MD5

4056da8081ef45527b1cbbf2996d7fbb
SHA1

6255f1dbb31293c1c5f0492e2a5ef544b8fcab58
SHA256

decc4dee9d45b1a3e4d6ca3e2c209d260d98f8425c50278f5f4318592735a5cc
SHA512

acdda80b4907b496719d30209aa0f2d96fafdc257bf33f559517b60b5fbd7f3e90b4a9cbb00c0064798882ddcaa397949390d564c4f319aaedecc9d465b3d393
SSDEEP

12288:4Gc4vS2JMfrE+aerjpFIi5qiflHxXYZEQBdN5:4G+QarH1rjpFgSlBQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4056da8081ef45527b1cbbf2996d7fbb

Files

4056da8081ef45527b1cbbf2996d7fbb
.exe windows:4 windows x86 arch:x86

1bf47cb61b765dd9d364286edae9055f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
GetProcessWindowStation
FindWindowA

kernel32

GetSystemDefaultUILanguage

Sections

.text
Size: 474KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE