4851e593866c826bcfd23bd2240d74be | Triage

Sharing

General

Target

4851e593866c826bcfd23bd2240d74be
Size

12KB
MD5

4851e593866c826bcfd23bd2240d74be
SHA1

f9437d25348eebf8c8aeed9f1d857ec76f93042f
SHA256

8425d51a4f3e5c8d742e3c3b4603ceb74844685ac583fda2609e3a58ad9aef95
SHA512

ae7f61cf3c830a528ea27f6c5e3b2ce8c93119225964088e32f63fad5bffef58e550af17d53e4dd98bfc39e243107e7ec0315e2d6ab5731ffe12eb9078e06daa
SSDEEP

192:zVp3iDOUE3AgwY3cPxcskk1bJBepmVaVx4XPgA5bRMhWn/aS/Fjt1E6yy18gy/fu:X3aOuYsZcske3k/Vx4bbyh89AaegOu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4851e593866c826bcfd23bd2240d74be

Files

4851e593866c826bcfd23bd2240d74be
.exe windows:1 windows x86 arch:x86

855d28b330c7a179c1eeb3d4a3d18595

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

Sections

.text
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE