4fbdfff0b458689775e992fc9a6e650c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fbdfff0b458689775e992fc9a6e650c
Size

392KB
MD5

4fbdfff0b458689775e992fc9a6e650c
SHA1

e8cd52e689e300d1a010ed7e6e3c42e867eef410
SHA256

7b9a5c129669225fef4c0e03b38195f818284b193551152f9f9f1447bf223f86
SHA512

a69c5e28534ea0ddb771cb2eeb6cdf97dbbd60035533d4f537db033ec7958b425c8e8198c5a30cc505fa0631f1ce1e55e1a9fd47f5f35c15ffe791293a253a2a
SSDEEP

12288:HkUimM++uPhOjTFN9Lv12hAJ9hrYCpDrIzC3nu:Ejq+MhaFLvtJsY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fbdfff0b458689775e992fc9a6e650c

Files

4fbdfff0b458689775e992fc9a6e650c
.exe windows:4 windows x86 arch:x86

063a9338af7b02bc691c2d98b6d95b77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
CloseHandle
LCMapStringA
ExitProcess
LoadLibraryA
CreateFileA

user32

SetWindowLongA
CharLowerBuffA
wsprintfA
CreateWindowExA
CloseWindow

advapi32

RegDeleteKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA

Sections

.text
Size: 369KB - Virtual size: 372KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ