753632368062f8f805f98f9b14970afe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

753632368062f8f805f98f9b14970afe
Size

3KB
MD5

753632368062f8f805f98f9b14970afe
SHA1

4f0e947d64489e49587d3bd08ff3e35828a75e97
SHA256

ad5bda0d8a4094d8b01c6c28e1a8e2c7eaae015502104eb2ff112b6289d8e097
SHA512

5a0bb3e715fced94484a158dca4271db4a600c7d82a7615e54bb3f4e8e3d65f7f768cf0c083e8e0f4068873655af8cad5b6b6041c640620adcddddf36899481b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
753632368062f8f805f98f9b14970afe

Files

753632368062f8f805f98f9b14970afe
.exe windows:4 windows x86 arch:x86

f50668be3da89a17f7db2bfdab72ff8e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterHotKey
SetWindowsHookExA
GetMessageA
UnhookWindowsHookEx
GetForegroundWindow
GetClassNameA
GetWindowThreadProcessId
GetWindowTextA
GetKeyboardState
GetKeyState
ToAscii
GetKeyNameTextA
CallNextHookEx
wsprintfA

kernel32

CreateMutexA
GetLastError
GetModuleHandleA
ExitProcess
GetLocalTime
GetDateFormatA
GetTimeFormatA
CreateToolhelp32Snapshot
Module32First
CloseHandle
GetComputerNameExA

advapi32

GetUserNameA

msvcrt

fopen
fclose
fprintf
fflush

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE