04d3fed52cc199376f5e464d29dc56e6 | Triage

Sharing

General

Target

04d3fed52cc199376f5e464d29dc56e6
Size

93KB
MD5

04d3fed52cc199376f5e464d29dc56e6
SHA1

392c4243d1dd79355fea8e382647ea683c0e541c
SHA256

41f4ff2abb633a51dad2f534a4d6b325e63a877d043ad9fc31b49fa62a8346d4
SHA512

4aa0161ca2dc6cd23f2d72604bd4a0b68545b7a687cdf31f979dbf3a67926a8b95bf28a2c504bf9a6d2bd518b29d890340a4249dc5a27e34aa3313a0e61bc805
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctVJ:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyCD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d3fed52cc199376f5e464d29dc56e6

Files

04d3fed52cc199376f5e464d29dc56e6
.exe windows:4 windows x86 arch:x86

baca414d331d1a694871e3bc5d0a6582

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CreateAcceleratorTableA
CharUpperBuffA
CharToOemBuffA
CharPrevA
CharNextA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcatA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
SetLastError
RaiseException
CloseHandle
EnterCriticalSection
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
MapViewOfFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE