6750b46dcda3cd04b5e278e3558754e49ed3b4558932ade56f1480ad4b2ec23a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6750b46dcda3cd04b5e278e3558754e49ed3b4558932ade56f1480ad4b2ec23a
Size

1.6MB
MD5

48e92fd7cf9d08f099d647a70bc8e7ad
SHA1

38470d5301cd9e5a327a9b299581683adb414574
SHA256

6750b46dcda3cd04b5e278e3558754e49ed3b4558932ade56f1480ad4b2ec23a
SHA512

07af909162a3c161f1c1b47160fb8d28211534ef0f3cd3eaf0a20ba78ba9e261cc550682273faf1c55af4fb5e66cfb9edc35003a167d478748c91a5b29ebc9f1
SSDEEP

24576:b582rx+sUYa9j0S27OHnHHsts/mGm+PSwhR3y0jSWxYBTNxu7JRg1dDjLB5B5mVs:O2lRa9j0insuEg5FYRzugdXnmW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6750b46dcda3cd04b5e278e3558754e49ed3b4558932ade56f1480ad4b2ec23a

Files

6750b46dcda3cd04b5e278e3558754e49ed3b4558932ade56f1480ad4b2ec23a
.exe windows:4 windows x86 arch:x86

25ce8b90bc5e3fc8d8128aae19fd5add

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetCapture
GetProcessWindowStation
GetOpenClipboardWindow

Sections

.text
Size: 650KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE