2919625730229ba77f55bb0e3a5d4483 | Triage

Sharing

General

Target

2919625730229ba77f55bb0e3a5d4483
Size

488KB
MD5

2919625730229ba77f55bb0e3a5d4483
SHA1

602616e342c35681c16fbc972c3f420d9175b69f
SHA256

6f9081c46115671eb441dcf4ccae5c86aa01044d95189c22aa1a45095d802d52
SHA512

dbec9f40eb857a26a5e941f6e951b9893312f49ab2833977cb5d65152c4efb7c8fa117d50b8b862f5828d869acf8a41182025d70a9910ebd07c667e337f1397c
SSDEEP

12288:Q35MhwJLdk79mY7lO5Be6KiuUHm1VFgdcDy+GM4efB:QJMOJJk7sY7kHTBGDu5ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2919625730229ba77f55bb0e3a5d4483

Files

2919625730229ba77f55bb0e3a5d4483
.exe windows:4 windows x86 arch:x86

421b46cd15b3862b41287aed328cfa78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddUsersToEncryptedFile
LsaSetTrustedDomainInfoByName

user32

GetClipboardOwner
GetInputDesktop

kernel32

GetCurrentProcessId

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 281B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE