4a941d963b0b09a62bf2e2a5fc5a1091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a941d963b0b09a62bf2e2a5fc5a1091
Size

82KB
MD5

4a941d963b0b09a62bf2e2a5fc5a1091
SHA1

17fab82bef9506e614c190dbf564fb6014d47c61
SHA256

ad54579397a8e01c3f30937178ba8e95d82510acba48a093b0464f85caf09ea2
SHA512

b813d57f8cdc6b8d61e5d2e0ab1055837e10fb74bcd1acef36b9f2e8ebb93971dbdbc2b5706866d5831e557e8bf291ae13ecc8ae78e5ecb908dd068f8a61e388
SSDEEP

1536:JFTHVAS0oBGigiuN3yzK8OfhzM0DXRxObxeAysukhQsmD/W:LTHWS0otmN3kK3DXRcxeAMkesmD/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a941d963b0b09a62bf2e2a5fc5a1091

Files

4a941d963b0b09a62bf2e2a5fc5a1091
.exe windows:4 windows x86 arch:x86

fac4711a3c33cc1a7fb723f59dc756a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateDirectoryA
PulseEvent
GetProcessVersion
OpenEventW
DeleteFileW
InterlockedExchange
GetFileAttributesA
SetFileTime
GetDriveTypeW
HeapDestroy
GetVolumePathNameA
GetCurrentThreadId
LeaveCriticalSection
SetFilePointer
VirtualProtectEx
GetModuleHandleA
OpenMutexW
CreateFileW
DeleteFileW
IsValidLocale
CreateFileW
GetTickCount
FindAtomW
GlobalFlags
GetModuleFileNameA

user32

GetWindowLongA
SetRect
SetFocus
IsMenu
DispatchMessageA
GetWindowTextA
DestroyIcon
LoadCursorA
GetWindowLongA
MessageBoxA
PeekMessageA
wsprintfA
DestroyMenu

dbnetlib

ConnectionOpen
InitSession
ConnectionClose
ConnectionError

advapi32

IsValidAcl

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE