404a6d06dce1303447f853c7c23af657 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

404a6d06dce1303447f853c7c23af657
Size

395KB
MD5

404a6d06dce1303447f853c7c23af657
SHA1

98bf31c9abdd92252ebccac8fcbb85432bfa4e23
SHA256

eeec5b2078ac2dea15a7f4c668c78afbe87d852104f87a7b4ba39cca641a5da3
SHA512

37daa9c72db9ec82a7d0f96349fe4e5b3b90c1f87f822b6c8f513ac5f63c7abf86af9f9fd90a86fce283c0bf88bb5932a19fb6385066efc7a68f49ded4ef0b4d
SSDEEP

12288:+2Yzn6NAHKUBfX0NjGoSdOC8g4G2G74zO+OeV3LnsEMiagno:dYm1UZX0hS98gp4aInsEMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
404a6d06dce1303447f853c7c23af657

Files

404a6d06dce1303447f853c7c23af657
.exe windows:4 windows x86 arch:x86

524e45db88dc6439f37b4388f1d8938c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
GetProcAddress
VirtualAlloc
TlsFree
GetCurrentThread
Sleep
DeleteTimerQueue
CreateSemaphoreA
GetModuleFileNameA

user32

IsWindowUnicode
PostMessageA

ole32

CoInitialize
CoUninitialize

netapi32

NetDfsManagerInitialize

psapi

GetModuleBaseNameA

avifil32

AVISaveOptionsFree
AVIPutFileOnClipboard

msvfw32

DrawDibEnd

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE