01f3d0d8042000c49efcefbf25124572 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01f3d0d8042000c49efcefbf25124572
Size

488KB
MD5

01f3d0d8042000c49efcefbf25124572
SHA1

4c2cd950fb1c8267debf6e1f5d8e0cafaad1464d
SHA256

5a37e1fa4edfc982516dffd3fb6fb0087e33bd568213e56aeac28a75e1abf080
SHA512

b7b585cfd67f0cf5e915711c8b45657daaddea9be12924018e107d2bd63d49fbcd09a6c5fa2abd571431f04cf5794dab522e3b312925990fd9728768a1e15c59
SSDEEP

6144:XGz/17SPmA41bjD95Yob0cpKF9c4gSS6qTCV/1tKGOcZrjVFMMAP+jiO6LD0qgrR:XGhSmL6ob0cEUpwKdcjVDAmVxZb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01f3d0d8042000c49efcefbf25124572

Files

01f3d0d8042000c49efcefbf25124572
.exe windows:4 windows x86 arch:x86

4d50a0dfe9a71493841c5260b38d1f3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DefWindowProcA
GetActiveWindow
GetForegroundWindow

kernel32

GetSystemDefaultUILanguage

Sections

.text
Size: 478KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE