fd848ddcf08db626a0d40939800b608c | Triage

Sharing

General

Target

fd848ddcf08db626a0d40939800b608c
Size

468KB
MD5

fd848ddcf08db626a0d40939800b608c
SHA1

7ccb61fc4bdc022085af4b0648cd684972fbd54a
SHA256

0e0ef07580b6103e253a718bf7fe2d448e878b1cc92e0046dbd4bf4fb7f21a5b
SHA512

77fa562dd191a5207038362ae0879eb7569b5d25742a7fc56afcbebb651edc2973cdc2da2d298e7ae27c41d3ee63262964989ce5e3a0e8609116f7ca7a075d73
SSDEEP

12288:x8FpUVk+FHo2fypQElCnuRg/QY3ghCulQuxsy7Ue0jIue5x0S9P:WFpUVTFIrQOCuhIsBSiTU1Iue5x0SB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd848ddcf08db626a0d40939800b608c

Files

fd848ddcf08db626a0d40939800b608c
.exe windows:4 windows x86 arch:x86

1a4d0689447d6556321240519a0eee5a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaGetUserName
LsaGetSystemAccessAccount
SetSecurityDescriptorOwner

user32

GetCursor
GetCapture
GetShellWindow

Sections

.text
Size: 463KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 231B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE