4709cf781b002f0bc90f89b97f1be973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4709cf781b002f0bc90f89b97f1be973
Size

39KB
MD5

4709cf781b002f0bc90f89b97f1be973
SHA1

79a4880f124d0a5b38cf97143ae1568fe7400db2
SHA256

85617226432ed915f95f3860c062f43e000ed9505e9b4ff60c6709ee09b49672
SHA512

33961eb4e750a35cf22ea23d601b4df2cbf0ef8e64470ae8c60b2fa64845f6bb67baeac1249f0d0826b0b7c0ae504cf3157b3e6cc40c3552916ca346f3a242c2
SSDEEP

768:30hvZ7K2gJSRzmKxBqg+9ZPba3QagR9DZGYVW6YXcTLNNY:kHSEHBq95XagR9lGYV/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4709cf781b002f0bc90f89b97f1be973

Files

4709cf781b002f0bc90f89b97f1be973
.exe windows:4 windows x86 arch:x86

7d126fbd44555a49bb4043091d660b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc

user32

GetWindowTextLengthA
GetTopWindow
SetParent
TileWindows
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE