b862d4ef644ba15dd1a5a59f1e14398f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b862d4ef644ba15dd1a5a59f1e14398f
Size

436KB
MD5

b862d4ef644ba15dd1a5a59f1e14398f
SHA1

fe86f89d0b4ebe75749c1193cdec935b3bc02a37
SHA256

6b185736fe89184f4b4447723dcecb994018556a8dba02ed1908251a9a94bb73
SHA512

4ac881217df84a5a90b3d1099cc43ad4b35623c9a2bd026e8365f6921172aa4b79fa78baa84faf28ccc84807ec72be0f0954e8fcb7d9f78c9755c3c44993aa64
SSDEEP

12288:xiqp5BUa83Xt1IgAr4DCEsh7swLISZaZgPC/:xiqPx83dCgArqC7bB4ZCC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b862d4ef644ba15dd1a5a59f1e14398f

Files

b862d4ef644ba15dd1a5a59f1e14398f
.exe windows:4 windows x86 arch:x86

28279f7a072135a3a4222bd97c3dd45e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlResetRtlTranslations

ole32

ReadOleStg

user32

GetInputState
DrawEdge

kernel32

GetSystemDefaultLCID
GetSystemDefaultUILanguage

Sections

.text
Size: 431KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE