4240629af2a3f15db06f8661006cd734 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4240629af2a3f15db06f8661006cd734
Size

128KB
MD5

4240629af2a3f15db06f8661006cd734
SHA1

92c1833060b6f86f0867c57ed26e06d9570815b6
SHA256

8e05fa7e17014e9e1ac9ff245cecd1109b2aa30bafd687849778deb09e3e44ae
SHA512

1f19f6a81616a7b34415d2b523b59c252ffd6f706931f38c7ebb2d6688d450e2c814bd3bfca152af0febc7e627a2730ccc6bca47b53e0de1d3a17fb8e36582b3
SSDEEP

3072:ZYrtb+wuVOKKPwlpqVj1M8XHYo7JVwjZSialA:ZgtWOqsVdX4QXAZSY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4240629af2a3f15db06f8661006cd734

Files

4240629af2a3f15db06f8661006cd734
.exe windows:5 windows x86 arch:x86

fa4932aaa94da0c4019cee108032dbfb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptGetHashParam

kernel32

FindFirstFileW

shlwapi

PathFileExistsW
PathMatchSpecW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
EndDialog
GetClipboardData
GetCursorPos
GetDlgItem
GetKeyboardState
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetThreadDesktop
ToUnicode

Sections

.odgbsf
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qtmxmv
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jkd
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ