4c5c488dda0e34a635878d11115a8b80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c5c488dda0e34a635878d11115a8b80
Size

2.0MB
MD5

4c5c488dda0e34a635878d11115a8b80
SHA1

ebca6b5a0997cb1089c3f480a5c42aa1ff826a40
SHA256

77e545d8374fa5b4d5a802fff9d48652b1b5cea79d76d9b78e7bf261ae862a2a
SHA512

86938c6718660a51a8fd6f52c9b0e2e025b5b9c781c357cdf139846dc5f90c580c43b4033ea5a7a865f0a2b9ebd54bf2a88df1d5d8e055bd1bd7037bd0e8d516
SSDEEP

49152:5L4gfsiWJLtYywtTQIdJfU+Mx5nDcs+B2843SBf1Pu/0hP:9z29wtTQIbUf5DcDohG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c5c488dda0e34a635878d11115a8b80

Files

4c5c488dda0e34a635878d11115a8b80
.exe windows:4 windows x86 arch:x86

471214c5a00a6968bed115d0be8eb577

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shfolder

SHGetFolderPathA

Sections

CODE
Size: 1.9MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE