4db2014241d4b5b53a6e98367feaa299

General

Target

4db2014241d4b5b53a6e98367feaa299
Size

289KB
MD5

4db2014241d4b5b53a6e98367feaa299
SHA1

1da052044dcad41bcf7e3d621239c5190f828947
SHA256

25fad28ea1e4d99ec715430a6641065084d03f95fad4c3e75d8166c737b443b1
SHA512

55a4f6220b1e9ad429ecb32e4fa6f7c64c6ff072665e84324dedd9cd3df7300e23e7cd1c4208a419b12cbc60ffc99e4fd28963bc9bdf0078007662a53026e873
SSDEEP

6144:8ykA0NFbMOW+HJ/sibEJCluRr01GnzK0n7bjW2dVkMP2NfYb:8ykA0DMOpEjl4GnzK0fj1PFb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db2014241d4b5b53a6e98367feaa299

Files

4db2014241d4b5b53a6e98367feaa299
.exe windows:4 windows x86 arch:x86

6b721b505d941f706ce8fec0a95b5d75

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetComputerNameW
FindAtomA
lstrlenA
InterlockedExchange
GlobalHandle
InterlockedIncrement
InitializeCriticalSection
HeapSetInformation
SetLastError
TlsFree
TlsAlloc
GetOEMCP
GlobalUnlock
LeaveCriticalSection
GetLocaleInfoW
GlobalAlloc
WaitForSingleObject
lstrlenW
RaiseException
FlushInstructionCache
EnumResourceNamesA
SetLastError
GetTickCount
GlobalFree
GlobalLock
InterlockedDecrement
MulDiv
TlsGetValue
DeleteCriticalSection
FormatMessageW
GetCurrentThreadId
CloseHandle
GetStringTypeA
EnterCriticalSection
SetUnhandledExceptionFilter
MultiByteToWideChar
CreateFileW
lstrcmpW
LocalAlloc
GetCurrentProcess
TlsSetValue
WideCharToMultiByte

shlwapi

StrRetToStrA
PathIsContentTypeA
PathAppendA
SHCreateStreamOnFileEx
PathIsFileSpecA
PathCreateFromUrlW

rpcrt4

RpcStringFreeA

Sections

.text
Size: 142KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b721b505d941f706ce8fec0a95b5d75

Headers

File Characteristics

Imports

kernel32

shlwapi

rpcrt4

Sections

.text Size: 142KB - Virtual size: 274KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 144KB - Virtual size: 143KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 142KB - Virtual size: 274KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 144KB - Virtual size: 143KB

.rsrc
Size: 512B - Virtual size: 4KB