04da967544ccb52380c3180cc274763e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04da967544ccb52380c3180cc274763e
Size

209KB
MD5

04da967544ccb52380c3180cc274763e
SHA1

7ffdfcbd33c19b5553178c20fd52c7644321e6c2
SHA256

461682ce253d39e5217b98e2f33807007352c299911f1ff5d5d55c8f7126fc35
SHA512

4cc92ecaabae7291cc7c8024cac78eb6f8453dbdfb186d35d34d1ed171bb59864b17aeb64a515f32cc45a80c8124e071dbfb0881cd8c9f802638516ccd6912cd
SSDEEP

6144:VlUz+NqLSGcc7JY0ZuMNgBPCwkM0rT18Zi9qbAGgZZo+oKS0wC:0aELSBSOYuMKPH0rT18ZiQUGIo+VS0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04da967544ccb52380c3180cc274763e

Files

04da967544ccb52380c3180cc274763e
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE