fd4d8a8f436e42bbec9c9533cdca28ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd4d8a8f436e42bbec9c9533cdca28ed
Size

805KB
MD5

fd4d8a8f436e42bbec9c9533cdca28ed
SHA1

c2ccbd80a7fa0fd26d7a5f1262e38ebd65035152
SHA256

94228f798d3a7576221c542fab907ad8ed4871b28dc4a6f5c10bdf707425340a
SHA512

77ca4d577fec4e5d3f42e9e6acaa980f35a07d7e0c5660260c551c94250f0bda0ec707326a6bb7ad025b1db13f9cbe42e55e8f48969294cf6c32bd78f2af4c64
SSDEEP

24576:TmeCiN4LGuA2YXim6AWC6BEQb4HaIQ1TZBft:Ky4LGuA2YwAW1qQb9/3F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd4d8a8f436e42bbec9c9533cdca28ed

Files

fd4d8a8f436e42bbec9c9533cdca28ed
.exe windows:4 windows x86 arch:x86

14b2a1e1ee054b100b047e8e6689e930

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
DeleteFileA
WaitForSingleObject
CreateProcessA
WriteFile
GetEnvironmentVariableA
MapViewOfFileEx
CreateFileMappingA
GetFileSize
GetLastError
GetModuleFileNameA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA

Sections

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ