4243a948ccd122eabd1fb4bb2393f25e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4243a948ccd122eabd1fb4bb2393f25e
Size

281KB
MD5

4243a948ccd122eabd1fb4bb2393f25e
SHA1

a641d5cc149ed4fb1911de0c17fdb04cc1c312f1
SHA256

6cd4fa3ed4f55542dfa5a7924e511ed412a3d70b7bb417e1a214c8b8734811a4
SHA512

ad2687e2ec81b39dfae0cfeeaa2fa16d3a4e02fd9d6146cc3c5f6789368a0ff50998300a8b517ef0bc0ea68cc2395c9a2924f9e69be7a7c75f34c2e8db8ef372
SSDEEP

6144:E0M/Om1lwxERlTsFF+7WWZ7753O83zVaI7B7aeux9m5yfuIsJ6X/MyCGkdbWVU:E1/v1lwalTsFFUWWv3l35auB76bTuIst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4243a948ccd122eabd1fb4bb2393f25e

Files

4243a948ccd122eabd1fb4bb2393f25e
.exe windows:4 windows x86 arch:x86

a0fe33e4139d8726a172a9f4e284a2fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

kernel32

FindNextFileW
GlobalAddAtomW
EnumResourceLanguagesA
SizeofResource
LocalFree
InterlockedExchange
MultiByteToWideChar
EnumResourceTypesA
HeapFree
GlobalFree
FindFirstFileA
LoadResource
EnumResourceNamesA
RaiseException
GetModuleHandleA
EnumResourceNamesA
LoadLibraryW
GetProcessHeap
SetLastError
LockResource
GetCurrencyFormatA
GetCommandLineA
HeapAlloc
FormatMessageA
GetCurrentDirectoryA
GetLastError
FindResourceExA
FindFirstFileW
GetProcAddress
CloseHandle
Sleep

user32

GetWindowTextA
GetWindowThreadProcessId
EnumWindows
IsWindowVisible
wsprintfW
wsprintfA

Sections

.text
Size: 140KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ