4577f09e38b9777dea1656a05a27091c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4577f09e38b9777dea1656a05a27091c
Size

1.1MB
MD5

4577f09e38b9777dea1656a05a27091c
SHA1

7388a70018feed08da5b8b182bb3453a295c1fae
SHA256

cab69b61c81f8ae0bc8ffa63755b794f47299bf6fa76f093ae77f51f227f2541
SHA512

fc94c1ae168750e1dd91155c63ffeea155750d4e7a06f9ef884d373d9c382f0c3b49b3b71505db8726eb3c6bc16fd138adec2a54ef46dcfd4da4cadd8e9e3e59
SSDEEP

12288:Kk4w2RAvF7pXEL1NH86xtD+i1pSzHDnK+1BXIJhxzKhkDRZPxLJSErbI6/KNODS1:KkWqpELxjuHDHXEFZPjZrnqGcogZHH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4577f09e38b9777dea1656a05a27091c

Files

4577f09e38b9777dea1656a05a27091c
.exe windows:2 windows x86 arch:x86

fc72a1e38b05b405e2c439a8ec6534d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

rasman

RasPortGetStatisticsEx
RasSetPortUserData
RasEnumLanNets
RasPortRetrieveUserData
RasSetCommSettings
RasRpcDeleteEntry
RasRpcGetDevConfig
RasDeviceGetInfo
RasPortOpen
RasPortCancelReceive
RasSignalNewConnection
RasPortStoreUserData

shlwapi

UrlCompareA
StrRChrIA
PathMakePrettyA
StrChrA
AssocQueryStringByKeyA
PathSearchAndQualifyA
PathIsDirectoryA
PathAddExtensionA

kernel32

UnmapViewOfFile
VirtualFree
VirtualQuery
MapViewOfFile
VirtualAlloc
CreateFileMappingA
GetCurrentProcessId
ExitProcess
CloseHandle

Sections

.text
Size: 578KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 535KB - Virtual size: 535KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.resrc
Size: 32KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ