4b8a50469ba5fd3342994de2fd97c267 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8a50469ba5fd3342994de2fd97c267
Size

28KB
MD5

4b8a50469ba5fd3342994de2fd97c267
SHA1

e7c8a0319f6ac48d54ae50a37386f83b6c62a0ed
SHA256

cab39dd883be0b763cd82d3f14bbe26377239a77551304dc67e3c256bec52f97
SHA512

03e92fce6b3e456a86b0be8bf2b4cd771c7bd4d341f18b063930c693d7f5ea751f91b2138660b4a8ee7a3eaf615d5443e1c92c2812485564c2b2740b8893b9b9
SSDEEP

768:PqKIX76ZHGT8G+9k4NRO5et4XCjgC5ms:JI6in+NNqXC55ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8a50469ba5fd3342994de2fd97c267

Files

4b8a50469ba5fd3342994de2fd97c267
.dll windows:4 windows x86 arch:x86

dea91e8448f038f16c318ee96324ddd0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetACP
GetEnvironmentStringsA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
HeapAlloc
HeapCreate
HeapSize
LeaveCriticalSection
ReadProcessMemory
TlsFree
lstrcatA
lstrcmpiA
lstrlenA

msvcrt

wcscpy
__p__commode
__set_app_type
exit
free
strspn
wcscat
wcscmp

user32

DestroyWindow
GetDesktopWindow
GetSubMenu
RemoveMenu
DeferWindowPos

oleaut32

ClearCustData
SafeArrayDestroy
OleIconToCursor

shlwapi

SHDeleteEmptyKeyA
PathFileExistsA
PathBuildRootA
SHOpenRegStreamA
SHSetValueA
PathGetCharTypeA
PathGetDriveNumberA
StrChrA

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ