4ea9795725627a6559cbe9913b8c934a

Sharing

Copy URL Twitter E-mail

General

Target

4ea9795725627a6559cbe9913b8c934a
Size

108KB
MD5

4ea9795725627a6559cbe9913b8c934a
SHA1

8b5a1877e3b8f2f173eaa738d4776ebeeea4e410
SHA256

d3a854440327808a607321d1caccad5a070809f7bbfe4ec7744dc1be163aad0e
SHA512

953934588bf84ed3c1b8a3f2bc40acc6fe8f761a09ccfc5b781d5e6c33c9923c7d00c047a7934d1942aec87bc051a5a3004e77c7934cd86d917ca9c3d13c0722
SSDEEP

3072:poquK2Vhr+2B0hQf4tPzr7V+xIcHcirhq:yK4s2EtPPhcHcd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ea9795725627a6559cbe9913b8c934a

Files

4ea9795725627a6559cbe9913b8c934a
.exe windows:4 windows x86 arch:x86

fbc61d1fceef46bb40bd029f807e2385

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
log10
memmove

kernel32

GetModuleHandleA
GetVersion
GetFullPathNameA
SetEvent
GetThreadLocale
WaitForSingleObject
GetFileSize
CloseHandle
ReadFile
SetEndOfFile
FindClose
LoadLibraryExA
lstrlenA
GetCurrentThread
GetCommandLineA
EnterCriticalSection
GetStringTypeA
InitializeCriticalSection
Sleep
GetEnvironmentStrings
SetLastError
lstrcmpA
FreeResource
GetCurrentThreadId
MulDiv
CreateThread
SizeofResource
HeapAlloc
GetTickCount
lstrcpynA
LocalAlloc
CreateFileA
GetLocalTime
LocalFree
GetDiskFreeSpaceA
GlobalDeleteAtom
GetFileType
GetProcAddress
GetStringTypeW
GetStartupInfoA
GetLocaleInfoA
LockResource
GetUserDefaultLCID
GetProcessHeap
VirtualAlloc
GetCPInfo
WideCharToMultiByte
ExitThread
MoveFileExA
EnumCalendarInfoA
CompareStringA
CreateEventA
FreeLibrary
HeapFree
SetErrorMode
GetDateFormatA
SetHandleCount
VirtualQuery
LoadLibraryA
GetCurrentProcessId
lstrcatA

user32

GetClientRect
SetTimer
IsMenu
GetKeyNameTextA
GetForegroundWindow
EndPaint
BeginPaint
GetCursorPos
GetWindow
CreatePopupMenu
DrawTextA
CreateIcon
EnableMenuItem
FindWindowA
DeferWindowPos
EnumThreadWindows
DispatchMessageW
SetCursor
GetFocus
GetIconInfo
GetScrollPos
GetDCEx
GetSysColor
GetDC
GetMenuStringA
CharToOemA
EnumChildWindows
SetWindowPos
DrawIcon
IsDialogMessageA
GetActiveWindow
IsWindowEnabled
SetWindowTextA
GetMessagePos
CallWindowProcA
MessageBoxA
GetWindowTextA
EqualRect
CharNextA
GetDesktopWindow
CallNextHookEx
FrameRect
GetDlgItem
DrawEdge
GetCapture
FillRect
HideCaret
DrawMenuBar
DefFrameProcA
GetMenu
GetKeyState
IsChild
ShowWindow
DrawIconEx
DefWindowProcA
SystemParametersInfoA
EnumWindows
ClientToScreen
GetMenuState
GetSysColorBrush
GetClassLongA
RegisterClassA
GetSubMenu
EnableScrollBar

version

GetFileVersionInfoA

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 895B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbc61d1fceef46bb40bd029f807e2385

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

version

Sections

.text Size: 43KB - Virtual size: 42KB

.idata Size: 3KB - Virtual size: 3KB

BSS Size: 58KB - Virtual size: 57KB

DATA Size: 1KB - Virtual size: 1KB

.edata Size: 1024B - Virtual size: 895B

.text
Size: 43KB - Virtual size: 42KB

.idata
Size: 3KB - Virtual size: 3KB

BSS
Size: 58KB - Virtual size: 57KB

DATA
Size: 1KB - Virtual size: 1KB

.edata
Size: 1024B - Virtual size: 895B