439f1e541755c54412c61d68945c6c29e4b3469c4661aae6ad43c36fc45caaadN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

439f1e541755c54412c61d68945c6c29e4b3469c4661aae6ad43c36fc45caaadN
Size

2.0MB
MD5

99b41f6476d38d4c7bc52afe8bccabe0
SHA1

d54c58aeb76ee672dc45161f3e729e0ea46419d9
SHA256

439f1e541755c54412c61d68945c6c29e4b3469c4661aae6ad43c36fc45caaad
SHA512

0bcb5b23a94e9ed9d2d336e1cbde8bf443bfbd289cb1c8dc2c085d7f672e1aefb0375cb610bbb4ed63b972781c1095cb5f164a892fdeab78f4ea78b4535b7a24
SSDEEP

24576:WUAf2YaLbsx4jSQSE5Yh5n/fq2XGlz3BOZASGoFjnfqfO5oaFhY6JSEVZk1fxODb:WUAfmvjxpKS2XTZrSSoUqAV6R2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
439f1e541755c54412c61d68945c6c29e4b3469c4661aae6ad43c36fc45caaadN

Files

439f1e541755c54412c61d68945c6c29e4b3469c4661aae6ad43c36fc45caaadN
.exe windows:4 windows

1ec866009ed19fadb77a249625058ce9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetSystemDefaultLCID
GetCurrentProcess

user32

GetCapture

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE