b1638c8d291595e394de6d8d54baf18c7b68b84af6c618d93c63d10ede8f5271N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1638c8d291595e394de6d8d54baf18c7b68b84af6c618d93c63d10ede8f5271N
Size

34KB
MD5

f209e1d0670bd8ce9732586c1f3d51e0
SHA1

f073f86e9b93d7cce756b695248a2f0ec3a6302d
SHA256

b1638c8d291595e394de6d8d54baf18c7b68b84af6c618d93c63d10ede8f5271
SHA512

301dbae8282e66a386d3920ec145e2909d61032a49655767a9d96a86c02779dbfa1e4efc31531b831be32e9a7e672f6146ef3fb2a1e1e24f069cde4e224064ba
SSDEEP

768:7C/ZZIq55P8S1QZRPas6yjlbY8pxejmc1JsbR0y0DTo:7ChWqrnQZBzphY5j91ybsD8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1638c8d291595e394de6d8d54baf18c7b68b84af6c618d93c63d10ede8f5271N

Files

b1638c8d291595e394de6d8d54baf18c7b68b84af6c618d93c63d10ede8f5271N
.exe windows:4 windows x86 arch:x86

7de49cbc97a19a8399abeee12cd82ea7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
WaitForSingleObject
GetProcAddress
LoadLibraryA

user32

wsprintfA
SendMessageA
GetActiveWindow

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ