4b8ba246e9a123a8af18aba6eb250c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b8ba246e9a123a8af18aba6eb250c20
Size

326KB
MD5

4b8ba246e9a123a8af18aba6eb250c20
SHA1

5f77a4096d55efcc1ff924ccd2b877cc2e29512c
SHA256

7fb06968244441f5228a9d038db0e4b9e0e03cf0db7d48d66f0a925f3fdcb938
SHA512

fef248027bf24e567fefd9ebd8ff4126058f33f0cc2c9bc3b180b7344e04e9c08dcbb019b89d1d0e12efc4864206bb339212358aa2d3e425e49f75e3948a0b20
SSDEEP

6144:xqwD+X1xQatU+1CEJp4XEt8l3aw9Y6zfJvkeitTDYWMtrDVmCfNuI2RINhoDPnr:HO1xm+QoK0t4K3gCTDYWGrYzt+NST

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b8ba246e9a123a8af18aba6eb250c20

Files

4b8ba246e9a123a8af18aba6eb250c20
.exe windows:4 windows x86 arch:x86

60595fa3d005cb5dfcdcf32f4a9641a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
GetSystemTime
GetModuleHandleA
LocalFree
LoadLibraryW
GetDiskFreeSpaceA
GetTickCount
GetComputerNameA
FindVolumeClose
HeapCreate
Sleep
CloseHandle
UnmapViewOfFile
lstrlenA
GetDateFormatA
LocalUnlock
SetLastError
CreateFileA
CreateThread
GetCommandLineW

user32

GetDC
GetDlgItem
DrawStateA
GetComboBoxInfo
FillRect
IsWindow
DrawMenuBar
DrawEdge
CreateWindowExA
CallWindowProcA
DispatchMessageA
SetFocus
CheckRadioButton

advapi32

RegCloseKey
IsTokenUntrusted
RegEnumValueA
RegDeleteKeyA
FreeSid

sysdm.cpl

NoExecuteAddFileOptOutList

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ