405c9a2178e6188df34e305bc3d0ddbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

405c9a2178e6188df34e305bc3d0ddbe
Size

26KB
MD5

405c9a2178e6188df34e305bc3d0ddbe
SHA1

af0c362e3a14807b7cdf32754c2f8073f9df26a1
SHA256

eb10aff87bef6b0c1fdd903bfe57032a1ac604cb298491b133c70ae79a0d1397
SHA512

41115a8c7502c28b044d263cdee813dd1a0761407e60e318e596cc6a4c936157e473f5d45c81722cee8b6d65298d3942fa07d00755eb332fe997948bf43e7853
SSDEEP

768:OvNPsq1lDf+kMwpwPE+AHs6pfoR9CiQgOp:OvNPsqPCA9+AH5QR9Kp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
405c9a2178e6188df34e305bc3d0ddbe

Files

405c9a2178e6188df34e305bc3d0ddbe
.exe windows:6 windows x86 arch:x86

77b5712277e4dbd07cb7a64407c84a3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
MapViewOfFile
FindClose
GlobalFree
FreeLibrary
GetProcAddress
CreateDirectoryA
CreateFileW
GlobalLock
SetComputerNameA
Process32First
CreateMutexA
OpenProcess
GetModuleFileNameA
CreateProcessA
Process32Next
GetLastError
LoadLibraryA
GetVolumeInformationA
GetFileTime
GlobalUnlock
GetModuleFileNameW
GetThreadPriority
ReadFileEx
GetWindowsDirectoryA
GlobalMemoryStatus
SleepEx
FileTimeToSystemTime
GetShortPathNameA
GetTempPathA
CreateFileMappingW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE