4ad92bacdfd99564f392629732ae6f1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ad92bacdfd99564f392629732ae6f1e
Size

23KB
MD5

4ad92bacdfd99564f392629732ae6f1e
SHA1

b1687c428ced2f0f955a515be736810a6534d03a
SHA256

007706da9ec032d2d508c835a6b103b6cd51fd00cebb96198ae880ca45e159b0
SHA512

85cee19f3c517d1bdca06aae1246a4db237f85b2c9df9a05a4ddbbeaf0f924ac6dc72dc439f7937fc1c40fe8bc41dbe01f2306681516208fbab25a44e4ce7ab5
SSDEEP

384:+7ZfapsmVHgRK/rJ1OetA8gA49lBrenVy54Vp9htDtA9/toW3tbzt0:OpgTARK/rRggVq0hhWVtZzK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ad92bacdfd99564f392629732ae6f1e

Files

4ad92bacdfd99564f392629732ae6f1e
.exe windows:4 windows x86 arch:x86

5bdbfadc30986867f14f8da3f77b42ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
SendMessageW
DialogBoxIndirectParamW
ClientToScreen
wsprintfW
MessageBoxW
GetDlgItem
MessageBoxA

kernel32

ExitProcess
GetFileSize
CreateFileW
CloseHandle

gdi32

LineTo
TextOutA
MoveToEx

comctl32

InitCommonControlsEx

shell32

DragFinish
DragQueryFileA
DragQueryPoint

wintrust

WinVerifyTrust

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ