a4659005f8f4ef77615264671611a03d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4659005f8f4ef77615264671611a03d
Size

25KB
MD5

a4659005f8f4ef77615264671611a03d
SHA1

6b6b5eeb19cfdcc9bc8a98cb0a9eecf6a3cee1f6
SHA256

bb26b057d7adf3324c3e150346300eba043bf39d7a44da1b3be539ea26fe1b9d
SHA512

aa36b66ec3a736200b6d3c0367fc8c076a60d2fdf8fe676bfa80b61edad4bdfad915a524c5297514030604a9cc2532802fafed64264d602842bc82d1294accc2
SSDEEP

768:W/mWDbqyfBdfamsGqtT/BbF1lkfAGV/b7:WeebJdaBbF1lkfAGV/P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4659005f8f4ef77615264671611a03d

Files

a4659005f8f4ef77615264671611a03d
.exe windows:3 windows x86 arch:x86

e53e5fa31f6ccc0ac12f5407e98f31c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

GetKeyState
SetActiveWindow
GetFocus

gdi32

EndDoc
LPtoDP
SetViewportExtEx

Sections

.idata
Size: 512B - Virtual size: 326B

IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ