295fea88d9d630ceefb2ade71e14f37d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

295fea88d9d630ceefb2ade71e14f37d
Size

92KB
MD5

295fea88d9d630ceefb2ade71e14f37d
SHA1

ee403b927741274364d59a60e9caa773f60dbaad
SHA256

6b6360a388e8ae9a59bc2f9fc50c6294e027e9198b1342e9dd4d82cb94709c5a
SHA512

314f6a9e1b2557ef10f7eafcb016c1e923e1e861dadf0f7ca17dd8a6e058a782c16f766c4d507838909f1dca107a18b661b127c0a7dd5721c5a5cef6842ef2c9
SSDEEP

1536:W7FDGo4K9Ty+ihfQxtQg1nhFc9pJpk+tCwmg+Q6buWkJ2/tnJs1vk1PsG4evCuJE:yDGACQxjJGJpTP65vFJOEvCaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
295fea88d9d630ceefb2ade71e14f37d

Files

295fea88d9d630ceefb2ade71e14f37d
.exe windows:4 windows x86 arch:x86

af396646254f56230391bc77feef7630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

SetScrollPos
SendMessageA
GetClassWord

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE