281f8a0a090b1c8c6bdf0a80d1342f6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

281f8a0a090b1c8c6bdf0a80d1342f6d
Size

98KB
MD5

281f8a0a090b1c8c6bdf0a80d1342f6d
SHA1

8a244e146c9b8bb301175000807ff28a96d5dd1d
SHA256

35c84328db6d98971a63ff88a8a714d6f5a71891c73db30f767f1aa3e9d73fc0
SHA512

3cba29078a0b27ad7d3fde10024903d202e1baab132aedc2c4af8f8e47a3467a2b6a4871c87b0cad5a3581fcc7f41f4fe213393b8204939437277e60eb8543e2
SSDEEP

3072:Uofmw/HJf4HGXIqeBfR9YFtEWy7crZRDf/1pB:Uo5fJQHG06FpkQFf/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
281f8a0a090b1c8c6bdf0a80d1342f6d

Files

281f8a0a090b1c8c6bdf0a80d1342f6d
.exe windows:4 windows x86 arch:x86

54362757d79f660e11bad131e3809a2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

GetActiveWindow
SetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ