4839a885ccb7e1945828fd3f175eb9804f8ec8f6c54f28daa3e617d398fb2cba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4839a885ccb7e1945828fd3f175eb9804f8ec8f6c54f28daa3e617d398fb2cba
Size

1.7MB
MD5

5743a1a5f8ef4368b09f9df3d3ecbb39
SHA1

b0992b381ab48f9256f733b94012ef1553097835
SHA256

4839a885ccb7e1945828fd3f175eb9804f8ec8f6c54f28daa3e617d398fb2cba
SHA512

fdacc66d19c6b13322a8481b4bf99682baf8bcd3656e889b0ba434bea515f47da5dce30616ac14606c5d2f3ff3ff4ff84f463c32b5239573d910b916e34dc3c9
SSDEEP

24576:DWjqm9zADQ8tWz6gfGZ5Ygx4kwQEyG24op+H4uVCwgcPl1U83UpknFLMFxAIcNJl:6dfGZ5Ygxsycoy1VZgonUuUWlMGPS0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4839a885ccb7e1945828fd3f175eb9804f8ec8f6c54f28daa3e617d398fb2cba

Files

4839a885ccb7e1945828fd3f175eb9804f8ec8f6c54f28daa3e617d398fb2cba
.exe windows x86

703074f7e4b33aefff112f419dacba1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4218

msvcrt

atoi

kernel32

HeapFree

user32

ValidateRect

gdi32

SelectObject

comctl32

ImageList_AddMasked

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 704KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1024KB - Virtual size: 1024KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ