4f203ae30061654ef4920f0be8f19101 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f203ae30061654ef4920f0be8f19101
Size

219KB
MD5

4f203ae30061654ef4920f0be8f19101
SHA1

b8b1f1d1409822247df3adf1564858773d5ae32b
SHA256

54dba2e182d36fe3287699d0a3b26ef4e9401216af17e84b20a8072a7fa1114d
SHA512

a6112f72a883b7d72c857cccea0ac9c90870284121058b53995a7a0ac98693fcc3f30d2d7eb2aecf751d9687b457ddfe4af5d937451bc8c6ac63813f582b1883
SSDEEP

6144:C8TN2HQZY0EkovjxugMpyPrVl1Qlf1WInz4C65GIxfmX:nJ2H0/ovj41UrXMWysp5E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f203ae30061654ef4920f0be8f19101

Files

4f203ae30061654ef4920f0be8f19101
.exe windows:4 windows x86 arch:x86

5500bcc196f417c3b3c88d951bb770d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMConsoleOperation
ContinueDebugEvent
LoadLibraryA
GetLogicalDriveStringsW
GetProcAddress

user32

EndDialog
RealGetWindowClass
GetSysColorBrush
PostThreadMessageW
MonitorFromPoint

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 377B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 509B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.prdata
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE