639900c014be62489cedcd570d4455ef | Triage

Sharing

General

Target

639900c014be62489cedcd570d4455ef
Size

3KB
MD5

639900c014be62489cedcd570d4455ef
SHA1

8e36f655249ca92184bb83342cfe8366937a77c5
SHA256

52ae0197569eb78db8baec78d29593e130854a78b21572a19b02a8aee27b2ff7
SHA512

cb5459f0f09d37783decd37a32c39c1650ec64152ec52bac63ccd4d906aee6f2d962ce844196be111223b0c4ccdfd591ad2ac291785119fe201d8a4863eab2f4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639900c014be62489cedcd570d4455ef

Files

639900c014be62489cedcd570d4455ef
.exe windows:4 windows x86 arch:x86

57e4137974bbca1647abe581fdd738d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
lstrlenA
Sleep

user32

mouse_event
GetLastInputInfo

Sections

.text
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 505B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE