4a84a5e0a9db5c0af2e2483cb9c6fcda

General

Target

4a84a5e0a9db5c0af2e2483cb9c6fcda
Size

125KB
MD5

4a84a5e0a9db5c0af2e2483cb9c6fcda
SHA1

f32d453b6f0ca768318363ae38c73eed6029983a
SHA256

e18c18d93da04acf15179b857571c3010186f8077e2f0e9bc93c872bf6da2542
SHA512

9a35a79230521a399f036640f645ff0f6f9df8eacd84b6e0d718472fb1f033ff0a02e47a0cce6a3939374a9ad45a5f710759c33fec7d90986ff8bf48083b1cd3
SSDEEP

768:+dwmHECLOl9X3H5nhRy03t6XrMEfsJpChRucN:+ddxa9HHfdtYAksfSRbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a84a5e0a9db5c0af2e2483cb9c6fcda

Files

4a84a5e0a9db5c0af2e2483cb9c6fcda
.exe windows:4 windows x86 arch:x86

dd08abf03bc44886b04076d890fb165d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
FindResourceA
GetCPInfo
VirtualAlloc
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
LoadResource
SizeofResource
LockResource
CreateFileA
WriteFile
CloseHandle
lstrlenA
Sleep
GetSystemDirectoryA
WinExec
GetACP
DeleteFileA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetStringTypeW

user32

wsprintfA
ShowWindow
GetDlgItem
RedrawWindow

advapi32

RegCloseKey
RegOpenKeyA
RegCreateKeyA
RegSetValueExA

wininet

InternetOpenUrlA
InternetOpenA
InternetCloseHandle

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd08abf03bc44886b04076d890fb165d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

wininet

iphlpapi

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 24KB - Virtual size: 24KB

.rsrc Size: 4.7MB - Virtual size: 4.7MB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 4.7MB - Virtual size: 4.7MB