2faf9dfc47d8ba3264b21328943361fd495e92a59313785edc85d78837ac6254 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2faf9dfc47d8ba3264b21328943361fd495e92a59313785edc85d78837ac6254
Size

432KB
MD5

688e876af78bb7650e5624deceba5ea9
SHA1

315a0b2fd15ea6102c527c06505222fe735b7c4f
SHA256

2faf9dfc47d8ba3264b21328943361fd495e92a59313785edc85d78837ac6254
SHA512

0613170fffb145950ddad2a3c581680e4f92153bf35329b993bcbd17a0f550acc0372afb8af0f0959607ee63d7ced5e87c0ba79e2b1038cf5c1e38d8382707b2
SSDEEP

12288:2WO6cAUKCB54LcuUPTgQc0idiS9hUDkUiYjR:2WO6PCBWU7TcdkS2Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2faf9dfc47d8ba3264b21328943361fd495e92a59313785edc85d78837ac6254

Files

2faf9dfc47d8ba3264b21328943361fd495e92a59313785edc85d78837ac6254
.exe windows:4 windows x86 arch:x86

62038707ce98228265d6ebbd6c95fdfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarBoolFromI4

advapi32

GetSecurityInfoExA

user32

GetMessageExtraInfo
GetDesktopWindow
GetCaretBlinkTime

Sections

.text
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE