4bdfa70cf9f5bea31613f691b213b1f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bdfa70cf9f5bea31613f691b213b1f3
Size

202KB
MD5

4bdfa70cf9f5bea31613f691b213b1f3
SHA1

2e65355cf6eb72de93816ccf0b71b0946252785e
SHA256

dc650c43bb4c56e77ecb9c4f5ef8c67f388655bcfcfa09e9ed2d39815357dd1c
SHA512

29ca01d98e5743bf4d9dcbfaa7c36867508b4de0734251cb559fd17374466ea8224dc72c013f33a8cb817a4a19957a7849ac58e3e5fb1312eebda50444dd68eb
SSDEEP

3072:rE1gnN10oFpeJnCR0r0X26xk8iysQTG1FhvSTHxjvYhRGnJPbXXPbSQp:Y6nNmorGnws01iy7CItxnJDbSu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bdfa70cf9f5bea31613f691b213b1f3

Files

4bdfa70cf9f5bea31613f691b213b1f3
.exe windows:4 windows x86 arch:x86

bd1046538cd330390bfe8a6d9069c102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
GlobalFree
FindClose
FindNextFileA
FindFirstFileA
GlobalAlloc
MoveFileExA
lstrlenA
CreateProcessA
lstrlenW
LockResource
GetLocalTime
GlobalReAlloc
GetSystemDirectoryA
lstrcmpA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
ExitProcess
SetFileTime
GetSystemTimeAsFileTime

user32

wsprintfA
CharLowerW

shell32

SHGetFolderPathAndSubDirA
ShellExecuteExA

advapi32

RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA

urlmon

URLOpenStreamA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ