4c58b58badf255922e75e32ba201becf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c58b58badf255922e75e32ba201becf
Size

28KB
MD5

4c58b58badf255922e75e32ba201becf
SHA1

653c5687463d1872d99d7e255494b5c0ee9510d2
SHA256

8186015cf43cb746beb2130f7ada4c228e961fd86f8f4058691618d215c15c95
SHA512

6ae4e593caf534fe6cfc22da94d96b56725cac94a4b55b02d17b7f4cfaa5a70080a36a8c8cf3ede6db80cae2665266b66980f22f0ad4df63cf99b019a189e353
SSDEEP

384:OmFWT6Y6DBFmpCuxzpmtDmFHr8hUYqYA4C8wSxYsw0vVspTitGoGAbFJmtCDFdYx:O7MmUolY+YqYA4bNxisspWgLW4wuYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c58b58badf255922e75e32ba201becf

Files

4c58b58badf255922e75e32ba201becf
.exe windows:4 windows x86 arch:x86

157b6b6b2d3b833400a9d1a156399a84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyImage
ChangeMenuW
CallMsgFilterW
CreateMenu

shell32

Control_RunDLLW
StrRStrA
SHFileOperation
SHEmptyRecycleBinA
SHFileOperation
SHGetDesktopFolder
RealShellExecuteExW

gdi32

GetDeviceCaps
FloodFill
PathToRegion
PtInRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE