4a9d26133ea583f1262a4ae61dd5bf6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a9d26133ea583f1262a4ae61dd5bf6c
Size

25KB
MD5

4a9d26133ea583f1262a4ae61dd5bf6c
SHA1

63fd127719f9bdae27c8303369612aafeb6299ae
SHA256

dce3d00b9ce223256e6357d952294daa47f1330a8be16fff3eea29bfa4244800
SHA512

adb09c43f773bdf07ea071b0dc8f92dd13764dcdfa0f78838b92b31d02075ff50774eeafe74b676b70c202af2b6bd42b26acec50fc1c9111a19e413b6b4bbbd4
SSDEEP

384:hFyFRL8MNrNAFeTsfTrGrMlyKgRDeUkw50Y1rS+ATFLo:OAMXAFysbrGrjtRfaUrS+AT+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a9d26133ea583f1262a4ae61dd5bf6c

Files

4a9d26133ea583f1262a4ae61dd5bf6c
.exe windows:3 windows x86 arch:x86

d35d0cd411aac4023db0ca0ec48aff40

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

GetKeyState
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetViewportOrgEx

Sections

.idata
Size: 512B - Virtual size: 326B

IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ