4f0e68eb1a049a97073e1f5283793fef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f0e68eb1a049a97073e1f5283793fef
Size

120KB
MD5

4f0e68eb1a049a97073e1f5283793fef
SHA1

0976bfc722ca5cf3a6412ccf48109ec9c1cc8328
SHA256

47c1a310590ef62b997b41919b9b548d3562959e677fe076d1ff366b00f2b0dd
SHA512

68f0d914b23b02726fa67a8deab8395c5d06d8407ff88d8bbb75b92a5bc6ed5292cfbd3bcfd3e5a6a882eede0b98ad5434334469d3eb3287ee894bc1978f2013
SSDEEP

3072:P+I+P/1j2EZNFLZmIiLN8jd3eNJ2oVMwA06CRQj:Pdw1j2mvFP0N8h3S2chmOW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f0e68eb1a049a97073e1f5283793fef

Files

4f0e68eb1a049a97073e1f5283793fef
.exe windows:4 windows x86 arch:x86

364b6ea79d1c023cd3554d095c535e1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

BuildTrusteeWithNameW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptSignHashW
ElfBackupEventLogFileW
ElfOpenEventLogW
RegOpenKeyA
FreeSid

gdi32

GetBoundsRect
GetCharacterPlacementW
GetMetaRgn
GetDIBColorTable
GetFontAssocStatus
GetMetaRgn

user32

CheckMenuRadioItem
CreateIcon
DragDetect

Sections

.flat
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 75KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE