4db18965c25f70a7c729a7f1e56ee6aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4db18965c25f70a7c729a7f1e56ee6aa
Size

136KB
MD5

4db18965c25f70a7c729a7f1e56ee6aa
SHA1

419fa3a236c108c4d969040ad3eb2d8e05667a5e
SHA256

52ecb4c15fe3dfc41d06379195ab80ea92d67f33f7c93790dc020d1daff8efc2
SHA512

410d4b5e99650c603a642ae35e84342fa1c1697a1cc31c8bc42bd155becf58b1e66daef08047879afe57d8dfdafb1615b8045caa9b625fc34cc45f0c5454f315
SSDEEP

3072:HEy5EqNeXpfLKa42bo3jKmBat4nculjBTo5:HlEqNeXpfLKa9E3jJBatLUF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db18965c25f70a7c729a7f1e56ee6aa

Files

4db18965c25f70a7c729a7f1e56ee6aa
.exe windows:5 windows x86 arch:x86

e327d6add2c3e62f9c56794c8d9c6f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharLowerBuffW
SetLastErrorEx
GetDC
TabbedTextOutW
CreateWindowExW
wsprintfW
ShowScrollBar
AdjustWindowRect

kernel32

lstrcmpiW
GetModuleFileNameA
LoadLibraryA
DeleteFileW
GetVersionExA
GetLongPathNameW
GlobalAlloc
lstrlenA
GlobalHandle
LocalSize

msvcrt

_controlfp
__set_app_type
__p__fmode
_wtoi
__p__commode
perror
_amsg_exit
memset
_initterm
_ismbblead
fprintf
_XcptFilter
_exit
_cexit
__setusermatherr
__getmainargs

shlwapi

UrlGetLocationW
ChrCmpIW

gdi32

TextOutA
RemoveFontResourceW
RectInRegion
StartPage
SetBkColor
GetTextCharsetInfo

Exports

Exports

?CreateDlgMessage@@YGHPAXPADK|U

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.irdat
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 106KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE