4e264da599ac8dc9c4f169f7fb5e2121 | Triage

Sharing

General

Target

4e264da599ac8dc9c4f169f7fb5e2121
Size

393KB
MD5

4e264da599ac8dc9c4f169f7fb5e2121
SHA1

31d49d73d13f761fa99ed2f8200bd3c7120c4b07
SHA256

42e99728dad6f383bd8c82776d7437064b54aacd4de5e43d44fda28e757e6fb0
SHA512

acfc55a7fb8cead33f6bb2875341e0146cfea5092545dd49fb325c1cbeea7186dfda9a94ef1c2a4da78430d533707c5b96f4849eda06c8bf2615683d550a0fe1
SSDEEP

6144:9VUeNULfjGQXr8sQwJ8RdCCKoryzWz0cSxhIC/aulYcJeNsrFS/Zt3Zu7Ea6zvN4:vvULyjQorymC/aWYuosit3ZaEa6zV0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e264da599ac8dc9c4f169f7fb5e2121

Files

4e264da599ac8dc9c4f169f7fb5e2121
.exe windows:4 windows x86 arch:x86

117ea3d373e7263f117569ec04551627

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LocalFree
LocalLock
GetConsoleAliasW
FreeEnvironmentStringsA
CreateFileA
ExitProcess
WaitNamedPipeA
GlobalUnlock
TlsGetValue
GetACP
CloseHandle
Sleep
LoadLibraryExA
GetConsoleCP
HeapCreate
FindClose
CreateFileMappingA
FindAtomA
GetLastError

user32

DefWindowProcW
DispatchMessageA
CheckRadioButton
SetFocus
FillRect
DrawTextA
GetIconInfo
GetDC
DrawEdge
CallWindowProcA
CopyRect
IsWindow
GetDlgItem
MessageBoxA

clbcatq

SetSetupSave
GetCatalogObject
SetSetupOpen
GetComputerObject
InprocServer32FromString

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ