04987e711cd9b27669e525112f61e408 | Triage

Sharing

General

Target

04987e711cd9b27669e525112f61e408
Size

177KB
MD5

04987e711cd9b27669e525112f61e408
SHA1

ff6122b7df514dccc89029bc196db8a9d1230cf3
SHA256

ff70e071651b43efa1daba6336d1dd7ff7b42903005e7134ef6af49484c4beb2
SHA512

60a7d385e6a80fa651d0ece8aaa7594f71ca96b6a0f862e5d15f6c05c476937aa5c526efee9f5b7c6173ccbf919cf3ed9795c602fc349e9a0bf4e0637782531b
SSDEEP

3072:swcix434L220lQgz583ia4EMHTCVZUaJpJs/B6LV:px434l0SgznEM67ds/k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04987e711cd9b27669e525112f61e408

Files

04987e711cd9b27669e525112f61e408
.exe windows:4 windows x86 arch:x86

b4d271573872529215b14dc089457fca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvfw32

ICSendMessage
ICClose
ICOpen
ICDecompress

user32

SetWindowPos
SetCursor
RedrawWindow
SetParent
GetFocus
EnableWindow
TrackPopupMenuEx
InvalidateRect
ClipCursor
LoadCursorW
GetDesktopWindow
DestroyMenu
IsWindow
CreatePopupMenu
PtInRect

ole32

StgCreateDocfile
StgOpenStorage

kernel32

LoadLibraryW
GetShortPathNameA
GetCurrentProcessId
GetHandleInformation
UnhandledExceptionFilter
CreateFileW
EnumResourceTypesW
CloseHandle
ExitProcess
GetProcAddress
GetLastError
GlobalFree
GetModuleHandleW
GetCurrentThreadId
GetVersionExW

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ