c409700e74eb9d0f9ef3df42144d0a14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c409700e74eb9d0f9ef3df42144d0a14
Size

429KB
MD5

c409700e74eb9d0f9ef3df42144d0a14
SHA1

d8e50bc3a62f511558bbb9cf55249cae6774659b
SHA256

c15eca93c48a0d9161f622fb0f3b46626a1257568b249706795c609c46edcc69
SHA512

4f0d78a98ce55881146bd7c903980766c1ce87fb7696d862677e80cb18de56f321d40eb7c01de6391b8ae25344d963d1e94a01bb47312a8497baa1e6aac5948d
SSDEEP

12288:ZGx5F79GuHTgWLhIxzLUfy5enxH2STwukm:qrIVUfy5ExHDwX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c409700e74eb9d0f9ef3df42144d0a14

Files

c409700e74eb9d0f9ef3df42144d0a14
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 447KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ