86d4af84c2164b384bf8bb2da7280cb3 | Triage

Sharing

General

Target

86d4af84c2164b384bf8bb2da7280cb3
Size

25KB
MD5

86d4af84c2164b384bf8bb2da7280cb3
SHA1

76faab4d3df83a48691f88a26b4e35e529b0548b
SHA256

d475e3d2566c3673c4f54df1bf3729da360323ac0d496bf6b220a5a659a068cb
SHA512

1a14b9e572346bf7e4a37967fd448a5f7526e956d78c79fd8fa301af2a2f0e3d268ece85050ac47419661920ccf2c5b7153973993fe63a4c229a8f419bb95b81
SSDEEP

384:iO6oOJ9evo97boLTAb05tvZkoYT2AlkpJc40f7+e:deGTqadZkf2UUufH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86d4af84c2164b384bf8bb2da7280cb3

Files

86d4af84c2164b384bf8bb2da7280cb3
.exe windows:1 windows x86 arch:x86

50dd56e8c6f9914775718bb75e8a69d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

GetKeyState
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetMapMode

Sections

.idata
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ