74a2cb04f8a037380f85265b6a5a71c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74a2cb04f8a037380f85265b6a5a71c2
Size

17KB
MD5

74a2cb04f8a037380f85265b6a5a71c2
SHA1

e7c5aff1beb0d539893b3988339477bdcb28fc4d
SHA256

e3cdc53780fcb14b41e89f4db744c6717c3c75b778c3bab6403f8b6ac6f0a166
SHA512

5815923d511fa7a49c1367e992f14f3e70009b29342abd09760d6f8ca6e7028e5db897e89dc6066bbe6c111f69af298675c0b1ed2677c44f60d69141393fd0df
SSDEEP

48:6sAiCtTzZBg5Z+rxh+zrNECdwUIvCn5sqn/Je/ex1F1S43lmMOOFBv7v:YBg5Z+l0qCKUVR/3h50MOgdD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74a2cb04f8a037380f85265b6a5a71c2

Files

74a2cb04f8a037380f85265b6a5a71c2
.exe windows:4 windows x86 arch:x86

6e34b5f8b2e6f26fd0ba4cd3a7115dc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ