fef02f9841649df1b4208274576d4d5aa498ca279de2b722c4a0791f95e5d6c8N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fef02f9841649df1b4208274576d4d5aa498ca279de2b722c4a0791f95e5d6c8N
Size

2.0MB
MD5

9be8ea7e4ceb03b77095a0c17b565250
SHA1

4d6155d36f9f43d57648353651e5df16cace1679
SHA256

fef02f9841649df1b4208274576d4d5aa498ca279de2b722c4a0791f95e5d6c8
SHA512

6b8f998719e3b9134a3a103ead8665f45adfd128f811723e4d2e3b7a79d0700ed41645bbf8540ee6dd280d10acc3f236db9ec2696f47419e1e58b757352cdd18
SSDEEP

24576://O9zHn2wJ2jJ9nu3crFdtAqDDXRikQW5rrpA9jjNM1X2TiwmGXDe5C9SzV+2EWQ:/wHn2wJ2vnuMrFI4wRCXWrgzV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fef02f9841649df1b4208274576d4d5aa498ca279de2b722c4a0791f95e5d6c8N

Files

fef02f9841649df1b4208274576d4d5aa498ca279de2b722c4a0791f95e5d6c8N
.exe windows:4 windows

78edd35ddf8805d42ee44b1fbc8ac4f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetInputState
GetForegroundWindow
GetKBCodePage

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE