4c9ed6e36e7f62ac29258c4e37949891 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9ed6e36e7f62ac29258c4e37949891
Size

77KB
MD5

4c9ed6e36e7f62ac29258c4e37949891
SHA1

85d9195a9fc0a6b7171813f7f1043372d3b0a559
SHA256

38c4f38f3acb29622f8701b94f536cd1888ea91c1071aaa9fdb3f191f79917f0
SHA512

167f1c0f404b638068789722764169a3f073dd65e29a2400a8f6a3a14f4ff094cc970d579e1300a622cd37e6e57040076e2ab9ed394bf514bba594458a77f133
SSDEEP

1536:u0JHlbm2vnI/ucV12I14iX4zpo76b3cstKyAD:u6Nm8m7FD4zZTI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9ed6e36e7f62ac29258c4e37949891

Files

4c9ed6e36e7f62ac29258c4e37949891
.dll windows:4 windows x86 arch:x86

c0c35ff3ca70fc8a21bfa505c19dc902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DispatchMessageA
DestroyWindow
DestroyMenu
DefDlgProcA
CreateMenu
CreateIconFromResource
CreateDesktopA
CreateAcceleratorTableA
CloseWindow
CharUpperBuffA
CharUpperA
CharToOemBuffA
CharNextA
ChangeMenuA
BeginPaint

kernel32

GetDateFormatA
lstrlenA
lstrcpynA
lstrcmpiA
lstrcmpA
VirtualAlloc
UnmapViewOfFile
TlsGetValue
TlsFree
SleepEx
SetEndOfFile
SetCurrentDirectoryA
ReadFile
RaiseException
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
FindResourceA
FreeResource
GetPrivateProfileStringA
GetStartupInfoA
GetSystemTime
GetVersionExA

Sections

.text
Size: 19KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 54KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ