4bdfe2e2ff422d839e789f0bbde6191b | Triage

Sharing

General

Target

4bdfe2e2ff422d839e789f0bbde6191b
Size

484KB
MD5

4bdfe2e2ff422d839e789f0bbde6191b
SHA1

0f2b2a5c4746bd977d9a8d0e0769b4cd8200680a
SHA256

5e202263da8838e5ec94d33ed01b0f049b93408907056750c46effa8191e47b2
SHA512

82f0bcc83271466263b98fd958948abfbfc7bd3d65ab6ec7871474aae900e7c73eda5906645d2369cc9d3977b7291c3252b4f3b92521a6b2632554fba24516e4
SSDEEP

12288:Oc4lTefFF2E2vYV/0Qz9FjtutvrhsJfpr:ayFFt2vYV/Dtus1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bdfe2e2ff422d839e789f0bbde6191b

Files

4bdfe2e2ff422d839e789f0bbde6191b
.exe windows:4 windows x86 arch:x86

3236411e0a3064b005ca985fffdad2cb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMenuCheckMarkDimensions
GetProcessWindowStation
GetClipboardViewer
PostThreadMessageW

ole32

CoRegisterChannelHook

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE