4123b6009b8a1c5ab188fdee28e176da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4123b6009b8a1c5ab188fdee28e176da
Size

806KB
MD5

4123b6009b8a1c5ab188fdee28e176da
SHA1

9d82d97cedcfd4a1f307db8aa97728dd09a83607
SHA256

48f636def9683dff49bb89326afd15c833f589d92e7b841a8f262f274c64c386
SHA512

9b98964321e8779f15b0a3da43fec73ac51710294d0a39f0dd18a7e6562f20aca5fcdefff85cf2cc2e88b2170e0ca4959e71e5de2d67385ef8834b4f7c60d40e
SSDEEP

24576:TX/8viE5JKPK2QgUMcflvIGvmUUvr7If:j8aA2KTMgFuxr8f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4123b6009b8a1c5ab188fdee28e176da

Files

4123b6009b8a1c5ab188fdee28e176da
.exe windows:4 windows x86 arch:x86

8c059d6956cbbab9f7857a0743646293

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
VirtualAlloc
LocalSize
GetExitCodeProcess
WriteFile
GetACP
GetMailslotInfo
FindVolumeClose
InterlockedExchange
CreateThread
GetEnvironmentVariableA
lstrlenA
GetPrivateProfileIntW
CloseHandle
GlobalFree
GetDriveTypeW
ReleaseMutex
LocalFree
GetModuleHandleW
FreeConsole

user32

DispatchMessageA
CreateWindowExA
GetKeyboardType
GetClientRect
CallWindowProcW
GetCursorInfo
IsWindow
GetSysColor
GetSysColor
DrawStateW
SetFocus
GetClassInfoA
EndDialog

msexch40

DllUnregisterServer
DllRegisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer

hdwwiz.cpl

InstallNewDevice

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 797KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ