4e5e19354c8da5b76f8e8ae9a1ce8d2a | Triage

Sharing

General

Target

4e5e19354c8da5b76f8e8ae9a1ce8d2a
Size

34KB
MD5

4e5e19354c8da5b76f8e8ae9a1ce8d2a
SHA1

a1c51fa01e4f7cfc12c2584cc9234d17822bad92
SHA256

24d654e86754fd645b454fbe14ad8d005cca326d01811d37874dfc43c187985e
SHA512

70c89ea8d8a03f2f2949a53df4815de669b954be879970d3dd6f1b2424e8369fda1c660a5fb6744d6861a14f329471d959ce2425fede5b9ce22516d165cb437f
SSDEEP

768:7C/ZZIq55P8S1QZRPas6yjlbY8pxejmc1JsbR0y0DTt:7ChWqrnQZBzphY5j91ybsDp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5e19354c8da5b76f8e8ae9a1ce8d2a

Files

4e5e19354c8da5b76f8e8ae9a1ce8d2a
.exe windows:4 windows x86 arch:x86

7de49cbc97a19a8399abeee12cd82ea7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

wsprintfA
SendMessageA
GetActiveWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ