4d5a24922e6e469c0f75246d464ac57c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d5a24922e6e469c0f75246d464ac57c
Size

167KB
MD5

4d5a24922e6e469c0f75246d464ac57c
SHA1

98a7459d7485757048f59d965f1f65e458d0b0e3
SHA256

ddc9e4893d7a56bb1c807ccf42501a95c7a7c53e9b4dfdafca191714c758919c
SHA512

02a790b6d2b72302a159fee920985b83e59dc46986d525136a59dad71ed1e67ea9a3b128a3888540cfd2993601ae0e80544615f90f38102da1acd707773c16ff
SSDEEP

3072:RvtpASGOvvUzEJP1+CQbQ0JETxv6AstUgCStQBVJjEMbfKe2aC0MP:GSGOvvUwNLFTxiA6fUVB32FrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d5a24922e6e469c0f75246d464ac57c

Files

4d5a24922e6e469c0f75246d464ac57c
.exe windows:4 windows x86 arch:x86

7fd1b00244eb8760b6789fe02ca53637

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriority
GetProcessHeap
SetCommTimeouts
VirtualAlloc
EnumResourceNamesA
ExitProcess
GetProcAddress
LoadLibraryA
FreeLibrary
VirtualFree

advapi32

RegCreateKeyExA
RegCloseKey
RegQueryValueExA

msimg32

AlphaBlend
TransparentBlt

user32

GetKeyState
GetClassLongA
CharNextA
CharLowerA

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ