4c0c5113fb7aa1cc8c23d74fe56d1704 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c0c5113fb7aa1cc8c23d74fe56d1704
Size

197KB
MD5

4c0c5113fb7aa1cc8c23d74fe56d1704
SHA1

8f36be4c0885bf8b3872f6109b48db28f53fa8c2
SHA256

48b5e609c2f109ca1a2a9b7866bf8c38f3729e9eff9f9d60d6e3048b94a35df9
SHA512

14932238febfe2eaf00c7b7366a855c2af1671824b0ce223d1ea78fe28bc5a95d53dcde876b8efbd34e86014a21964dc3b22e23ac787d21f0873452cff0aaabd
SSDEEP

3072:OlYIf+oweHlWNis0Xt6JXSbURgW5+0hlH7ilarDXWIylWO5yKq7Oc+b3HxGt+/xQ:m+Dris6t6JXSbjW5+0GI/MyPF+rotyxQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0c5113fb7aa1cc8c23d74fe56d1704

Files

4c0c5113fb7aa1cc8c23d74fe56d1704
.exe windows:5 windows x86 arch:x86

eb007d540d566b64320ae6c5723a5348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextExtentExPointW
SetLayout
GetTextColor
Polyline
SetDIBits
GetClipBox
SetPixel

kernel32

GetFileType
HeapCreate
WaitForMultipleObjectsEx
UnlockFile
Sleep
TlsFree
FormatMessageA
CompareFileTime

user32

GetActiveWindow
GetNextDlgTabItem
IsWindowUnicode
FillRect
LoadBitmapA
CharNextA
DestroyWindow
HiliteMenuItem
GetWindowLongW
CreateWindowExA
LoadMenuA
GetMenuState
GetSysColor
CharLowerW
SetDlgItemInt
SystemParametersInfoW
EnumThreadWindows

shlwapi

PathIsDirectoryA

Exports

Exports

PutWindowInfo@12
OnSystemExA@12
DeviceExA@12
DataW@4
IsNotSizeEx@16

Sections

.text
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ