349378844d8b5ca1c5be858f5057fdd5725a7b274db1cb07ef15631ab52e34b9N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

349378844d8b5ca1c5be858f5057fdd5725a7b274db1cb07ef15631ab52e34b9N
Size

2.0MB
MD5

7f0213b8d9251814c75f5a16a839a670
SHA1

9f1223e9f828f650def5797869b9429ac365eec9
SHA256

349378844d8b5ca1c5be858f5057fdd5725a7b274db1cb07ef15631ab52e34b9
SHA512

b1b4dd58d7b9a9ef5937748a490c12bf8ff768bddbf1cb5ec2fcae5948c4b25c6094eadf59308777df8e9a2c9c9b0d6ecac29c93dd112075d3c135856c60cd64
SSDEEP

24576:ro+Zfor08ToZRn9bpLpyvTJ6rtze4d1ZpmMVChjV6nCcd9pa4CYWSWb0gxOh5qzh:r7+ToLZKTo4MpLSKwR7Qr8m6JV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
349378844d8b5ca1c5be858f5057fdd5725a7b274db1cb07ef15631ab52e34b9N

Files

349378844d8b5ca1c5be858f5057fdd5725a7b274db1cb07ef15631ab52e34b9N
.exe windows:4 windows

06b77e41527d426e7747fac2b06340e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
VirtualAlloc

user32

GetActiveWindow
GetMessagePos

Sections

.text
Size: 676KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE