4b3f3cb9e8b1d95b5769d79c39163b23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b3f3cb9e8b1d95b5769d79c39163b23
Size

345KB
MD5

4b3f3cb9e8b1d95b5769d79c39163b23
SHA1

c4fed04525401d46c6025cf2ca2c42bb6560c78c
SHA256

6dac8dfd83773d8e49a359197b89e1cd68ca0a4ed1ba79f706990db83b647010
SHA512

8e0fa7f9571de3f58c1d97feac8783dd90d033835fbbc22b82b2b48266aabb9747e75327881dafb296bdf06367690579e275b52d4a2e180e9419c0d9cf1a59d2
SSDEEP

6144:CNkorhb/FjJznGuD2uVVPrmxFQ3ocl55hI5GETORSmD/n:8zN/Z1DzrmPQX/yPe/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b3f3cb9e8b1d95b5769d79c39163b23

Files

4b3f3cb9e8b1d95b5769d79c39163b23
.exe windows:5 windows x86 arch:x86

1bf771f0f0cb9f2730264e32e13e7654

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
GetSystemMenu
RegisterClassExA
SetWindowTextA
BeginPaint
EndPaint
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA

gdi32

DeleteObject
FrameRgn
GetTextColor
CreateFontIndirectA

ole32

ProgIDFromCLSID

kernel32

GetStartupInfoA
GetEnvironmentVariableA
GetPrivateProfileStringA
InterlockedDecrement
EnterCriticalSection
GetEnvironmentStrings
LeaveCriticalSection
DeleteCriticalSection
GetTickCount
GetCPInfo
GetFileType
InitializeCriticalSection
HeapDestroy
HeapCreate
lstrcmpiA
SetFileAttributesA
HeapAlloc
HeapFree

Sections

.text
Size: 325KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ