4e96ae58d6be25d5166f50a3f539ef8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e96ae58d6be25d5166f50a3f539ef8f
Size

424KB
MD5

4e96ae58d6be25d5166f50a3f539ef8f
SHA1

54faea24edfa682cdf72635dd02f55506b8b0594
SHA256

3e3f23a317e44a046ece02b2f06d3d4c3fcaee5c82281776e52cbbfdec28896a
SHA512

8174a1681372529ecba140ccbf876f329185e4f37c04783513f136c754fdc1eac7f5a105a81506d636942138aee03ec5e1516a06f3305b1260fc2c174b41860e
SSDEEP

12288:v6h5mf3I2iwDzgn3Y5h6sriJdEI2T1AUXnU0W:SXa3Kw/gnShkv617XnlW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e96ae58d6be25d5166f50a3f539ef8f

Files

4e96ae58d6be25d5166f50a3f539ef8f
.exe windows:4 windows x86 arch:x86

e2381a37ca439dec9547277017c3cd4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
VirtualProtect
GetLocaleInfoA
SetEvent
ResetEvent
CloseHandle
LoadLibraryExA
GetSystemDirectoryA
ReleaseMutex
Sleep
EnterCriticalSection
InterlockedExchange
SetErrorMode
RaiseException
GetACP
GetLogicalDrives
FindFirstFileExA
GlobalFree
GetLastError
GetCommandLineA
HeapCreate

user32

SetForegroundWindow
ReleaseDC
FillRect
ShowWindow
DrawTextA
IsIconic
GetActiveWindow
GetFocus
wsprintfA
EndPaint
GetParent
ValidateRect
BeginPaint
FlashWindowEx
GetCursorPos
GetWindow
GetWindowTextA
FrameRect
GetClassNameA

dsound

DllGetClassObject
GetDeviceID
DirectSoundCreate
DirectSoundEnumerateA
DirectSoundCaptureCreate

clbcatq

CoRegCleanup

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ