4802e885cd3421f0e79605b230cb4d24 | Triage

Sharing

General

Target

4802e885cd3421f0e79605b230cb4d24
Size

107KB
MD5

4802e885cd3421f0e79605b230cb4d24
SHA1

f22c6cd280fbcdd698bf44603203c2bb10d8ebaf
SHA256

e969cec7083be11559a28b81ac75f053a529e76e175513234760cc3e4bc768c5
SHA512

c489bc3db5e03e88f163c42fc393a0139b875571fc588f658c902bc4574bf8a2d3b82131d03dcdd863a54c4837b4ef8ab24671b9d002cb0b150dd1ee65416a6c
SSDEEP

1536:CJ/1ugA00ZIvcUltqEzMe+3hNXVNGI9qETjM9ZRLlopK9miOykNsrxRvjtr:CT+jZInl7gPhN+oFTiZ1GpBsrxRvjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4802e885cd3421f0e79605b230cb4d24

Files

4802e885cd3421f0e79605b230cb4d24
.exe windows:5 windows x86 arch:x86

0c357f431ac7ee08881cdafc8fa33c0c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
GetDesktopWindow
TranslateMessage
GetSystemMetrics
GetParent
CharNextA

kernel32

RemoveDirectoryW
FindClose
lstrcmpA
lstrlenW
QueryPerformanceCounter
RemoveDirectoryA
GetModuleHandleA
GetWindowsDirectoryA
lstrcmpiA
CopyFileA
lstrlenA
GetSystemTime
GlobalFindAtomA
GetCommandLineA
lstrcmpiW
DeleteFileA
VirtualAlloc
VirtualFree

gdi32

GetTextMetricsA
SelectPalette
RestoreDC
RectVisible
CreateCompatibleDC
DeleteDC
LineTo
GetStockObject
GetObjectA
SaveDC
SetMapMode
CreateSolidBrush
SetStretchBltMode
CreateFontIndirectA
GetDeviceCaps
CreatePalette
GetPixel
SetTextAlign
SetTextColor
DeleteObject
GetClipBox

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ