a545972536ab1ebac19affd6eda2bc4be1434c1558107bc95fcb1c8eed9ce320N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a545972536ab1ebac19affd6eda2bc4be1434c1558107bc95fcb1c8eed9ce320N
Size

2.2MB
MD5

5f4785b2b64afaccfba192b8e810cb20
SHA1

7a115bdc2695f5ffdfe0a43d48e0c74566449f31
SHA256

a545972536ab1ebac19affd6eda2bc4be1434c1558107bc95fcb1c8eed9ce320
SHA512

939710b16712564b22266971db9760dc36ea413632aef9128cb6681b60b2a8b280c28d7cb6c0adef785ca78dfdf907d3b1d11a59d14aa46ce4890373e5a29e15
SSDEEP

24576:5t6xhQvuGJwnMJ+VPQh0sg96zqIaD5cmLr0iw9X0+DnvCz9Crqt/Zfpx79hVFY:OxhQvujMJHhb26zdaD5cjhA/Z/7U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a545972536ab1ebac19affd6eda2bc4be1434c1558107bc95fcb1c8eed9ce320N

Files

a545972536ab1ebac19affd6eda2bc4be1434c1558107bc95fcb1c8eed9ce320N
.exe windows:4 windows

506dc4c562b651938b2481321651f998

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetActiveWindow
GetFocus
GetDoubleClickTime

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE