405e2968579cf14cff9378c2490c8adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

405e2968579cf14cff9378c2490c8adf
Size

488KB
MD5

405e2968579cf14cff9378c2490c8adf
SHA1

12e6757b44a50ce36101c8e0360d06d6a4da99b5
SHA256

d8770dd50ec5a8bebe6dc581d882824508bdbfdeaa88e23169732f3fbdfeb6d9
SHA512

5db4c16adb961424ceb77d89a1e2bc273601c15febe46c71ab917869fe3c75734a2e8caf6a54fb999246304a0ffbe1b6c2e7032e04bf3ea877b1494c9ce7b1b4
SSDEEP

12288:vtDz8SyZr3vDtrz7iyNOjUM9OpyuSQZEGlm9sMQ:vtxyZzvDtf7iLUCOkuldmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
405e2968579cf14cff9378c2490c8adf

Files

405e2968579cf14cff9378c2490c8adf
.exe windows:4 windows x86 arch:x86

a74b833700da9da97700e5325071de19

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlInitializeGenericTable
LdrAddRefDll

ole32

ReadOleStg

user32

GetMenuCheckMarkDimensions
GetForegroundWindow

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE