4d0421c1e37b18f494da9f90ad9010db42ed0b339120a517c0d07fa562bc6652 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d0421c1e37b18f494da9f90ad9010db42ed0b339120a517c0d07fa562bc6652
Size

2.1MB
MD5

816f17fe2f35f5ad3b2ad5d3ca6126cf
SHA1

9bb9335d87503895be88c0f2be1069c04c103cc6
SHA256

4d0421c1e37b18f494da9f90ad9010db42ed0b339120a517c0d07fa562bc6652
SHA512

4874b0424471ee0d81181f8f136c49221cdf81df50594e6e018a2cffc29c4cdbff2f8b561e27a2a3d316ffcc93d31cab20fc5ee93f647731c9e2245c33e0850f
SSDEEP

49152:w45CyhixBihH0U2Byxf+8yZZJiOWFWoJKvzIpaG2Jj3b8:kii6hjjxpyV9WYzzGaGA38

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d0421c1e37b18f494da9f90ad9010db42ed0b339120a517c0d07fa562bc6652

Files

4d0421c1e37b18f494da9f90ad9010db42ed0b339120a517c0d07fa562bc6652
.exe windows x86

b1cf2015dee3de4ac58f1f46e0779fcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

UnhandledExceptionFilter

user32

IsZoomed

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_GetIcon

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 552KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ