d1dfc3313fdf9de78a94783081ccb1ad28063ce720256305d399e7e93b2d9c5aN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d1dfc3313fdf9de78a94783081ccb1ad28063ce720256305d399e7e93b2d9c5aN
Size

2.0MB
MD5

1249a5d704b70b5dfefe6b3564cdc970
SHA1

ff93ba4e650b95fff960e031e0b05c667bed6aaf
SHA256

d1dfc3313fdf9de78a94783081ccb1ad28063ce720256305d399e7e93b2d9c5a
SHA512

c448cc343156952714ec18a7729363966a02f04f5e2e72e799d9c99ea2ded1be93c416d4ac48507c848b24a5a135b9d90c4d70c3468778526eb382ebdc5cd842
SSDEEP

24576:U+g+onMfzpQ+c47wi2Ocf095rxLcQLEnkeowj+l6s26xdpRJNwT9xGqVrZyT:U+1onoC47wZyCc6svHt2dVdy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1dfc3313fdf9de78a94783081ccb1ad28063ce720256305d399e7e93b2d9c5aN

Files

d1dfc3313fdf9de78a94783081ccb1ad28063ce720256305d399e7e93b2d9c5aN
.exe windows:4 windows

59fb2b37427e31fa5c2f5387771ecbda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

GetActiveWindow
GetMenuCheckMarkDimensions

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE