4450bd173d603ee65554237ecd4ab17a

General

Target

4450bd173d603ee65554237ecd4ab17a
Size

483KB
MD5

4450bd173d603ee65554237ecd4ab17a
SHA1

7b11afa102f6e8834d3c2d6632287ea7cb2587e8
SHA256

7d0bc17711e5bd6da2a011d23991926c54c817fbf993815fead8bfe6de41c49c
SHA512

4b6f6f801c7c942f6cb5213a0ab230b4d99615cfddae24e7c97a0e46d5a584a1f5be6dfadbd3e517f45af35f8b2e8440eaceb6c2c06d9f697a2f48aee47e467a
SSDEEP

6144:dNkl/aEEO6InzMBtIZ93F2lZ89uyAJph8n/Sr5a3o/GuxzGiqzgI+LZ2G+nCJ:dNgS9kn4sDYQYnJphTsxuPEg1FACJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4450bd173d603ee65554237ecd4ab17a

Files

4450bd173d603ee65554237ecd4ab17a
.exe windows:5 windows x86 arch:x86

9e4e5280089a9d36f5422eca370ce1af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
LoadImageA

kernel32

GetEnvironmentStringsW
ExitProcess
PulseEvent
GetTickCount
Sleep
CreateEventA
InterlockedExchange
GetLastError
GetProcAddress
VirtualAlloc
SetFirmwareEnvironmentVariableW
ResetEvent
OpenMutexA
CloseHandle
GetSystemTime
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
HeapReAlloc
HeapCreate
GetModuleHandleW
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 529KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e4e5280089a9d36f5422eca370ce1af

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 296KB - Virtual size: 296KB

.data Size: 3KB - Virtual size: 529KB

.rsrc Size: 156KB - Virtual size: 155KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 296KB - Virtual size: 296KB

.data
Size: 3KB - Virtual size: 529KB

.rsrc
Size: 156KB - Virtual size: 155KB