a4fa232ba942751c98c2ddf7dcbe822bc84469f071210c7772657c3f2afa5eba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4fa232ba942751c98c2ddf7dcbe822bc84469f071210c7772657c3f2afa5eba
Size

900KB
MD5

374dc1b4f4254b3942a82309ac93fde2
SHA1

332d71d1cd8290b1f4a4961ccf93fbac207e15f7
SHA256

a4fa232ba942751c98c2ddf7dcbe822bc84469f071210c7772657c3f2afa5eba
SHA512

ce56469a8fd103c6ec7f32d499f55e0e9f6a588b8a2d400962515150cf57b292151d38ac9d8188df1a164c22333c327cdb28a2398198112d60c4494fc725485b
SSDEEP

24576:jLhH7oDFIKZgKLamEP27QNP/FP5/4bunKQwW:iDFDJeT28NP3pvwW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4fa232ba942751c98c2ddf7dcbe822bc84469f071210c7772657c3f2afa5eba

Files

a4fa232ba942751c98c2ddf7dcbe822bc84469f071210c7772657c3f2afa5eba
.exe windows:6 windows x86 arch:x86

2388fee6ad8ce4f4a35dbaf64e2da01a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

EnumDisplayDevicesA

advapi32

CredEnumerateA

comctl32

PropertySheet

Sections

Size: - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE