75ea0df66560eed126805a22f7ee40c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75ea0df66560eed126805a22f7ee40c1
Size

480KB
MD5

75ea0df66560eed126805a22f7ee40c1
SHA1

513ae70a5e25d0a8d67dcd70c78b2b739cb0bb80
SHA256

a53cdbb0cdb805a2dda8b01d7d4515d092b0eafcf9f4e509bbe7fe92fcfbffbb
SHA512

334acb51602aa70f59d04481268959e7200d74778beb7851f26ff63e78cd970eef33217e670c34e02a2668ada7fe7ee2dac296961b33ca2072e5e4eb6ffd5523
SSDEEP

12288:JKtg+foBHJvLV8I9sbjbgOGmTbCl9Pt3sVauz1qPdwr:JK2Eo3v53Ofk4I+j1t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75ea0df66560eed126805a22f7ee40c1

Files

75ea0df66560eed126805a22f7ee40c1
.exe windows:4 windows x86 arch:x86

56f8d334bd3dce8a66946c9129ae6161

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtResetWriteWatch
RtlEncodeSystemPointer

kernel32

DefineDosDeviceA
GetCurrentThread
GetUserDefaultUILanguage

oleaut32

VarCyFromDisp

user32

GetActiveWindow

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE