401280bbb3e88ddcdb9570b075d44015 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

401280bbb3e88ddcdb9570b075d44015
Size

55KB
MD5

401280bbb3e88ddcdb9570b075d44015
SHA1

30f14b0a03b75cd012cc5f5c32930d84ff7db808
SHA256

78ecb600c7d8e6ced5866e7c1ead20560964816cfb2c7a6119012cad1284bc17
SHA512

c3d012f11b02abe592902c1ae2c15149edc8ca9a4fa8f51be767ae3762762116f24a0588ca1f7ee28859fe4cd0b059f01dc5070fcdda06691ad10a3ac93d8af8
SSDEEP

768:U3fPHrKcTw+lqvdu/c+7BLbC4kzSk+WdXpfmjxrvHREtvu2MMLpq:UvD/wZvdGc+tPC4kzx+CqxDHIG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
401280bbb3e88ddcdb9570b075d44015

Files

401280bbb3e88ddcdb9570b075d44015
.exe windows:5 windows x86 arch:x86

9b2471e86bd8d2c58452a97f9e30e58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapAlloc
VirtualAlloc

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ