2404[.]tmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2404.tmp
Size

14KB
MD5

294e9f64cb1642dd89229fff0592856b
SHA1

97b148c27f3da29ba7b18d6aee8a0db9102f47c9
SHA256

917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2
SHA512

b87d531890bf1577b9b4af41dddb2cdbbfa164cf197bd5987df3a3075983645a3acba443e289b7bfd338422978a104f55298fbfe346872de0895bde44adc89cf
SSDEEP

384:5cFP7VtpK4p+31Mzh79W5vM+ZyUgGq4BtMvAxXCRsi:A7Vf9p+qQ02y5HW6kX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2404.tmp

Files

2404.tmp
.exe windows:5 windows x86 arch:x86

ada35efe10769be0eeaecfd618fe6e7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateFontW
TextOutW
SetTextColor
SelectObject
GetTextColor
GetTextCharset
CreateDIBitmap

user32

CreateWindowExW
DefWindowProcW
GetWindowTextW
LoadMenuW

kernel32

GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ