494d53c1921735d63e1486cbd633d62e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494d53c1921735d63e1486cbd633d62e
Size

32KB
MD5

494d53c1921735d63e1486cbd633d62e
SHA1

b930481b3f0533ee87c11d3668cf35038514f560
SHA256

4723c579efbc41d6b9012de781a0469ccb33b2ac3fe5eab6ef7f839bcda2b2e4
SHA512

fd385bf747d284eda90fc9cb8596bf16da195f2d3fec5bac57d553ac530e9cc0cb3152916ac876fc00b8e9a2256339d6bd24650b8a39dfd75415445965346ff0
SSDEEP

384:bpHebkRaUk3hDCnUxQ+PS4q6/jMnabwVbonX6psKFWBanlUB5k23j9BKseW:bpHEuarXqWr/jMUwVbLsKcUlUHkJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494d53c1921735d63e1486cbd633d62e

Files

494d53c1921735d63e1486cbd633d62e
.exe windows:4 windows x86 arch:x86

4aa857dd6db38fbc06136a688e906533

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EscapeCommFunction
FindFirstFileA
GetVolumeInformationW
CompareStringW

user32

DdeConnectList
GetMenuItemCount
CharLowerBuffW
GetKeyboardType
SetClassLongA
WindowFromDC

shell32

Control_RunDLL
CommandLineToArgvW
StrNCmpW
SHAppBarMessage

gdi32

TranslateCharsetInfo
GetColorSpace
AnyLinkedFonts
GetColorAdjustment
EngLockSurface
GetFontData
GetCurrentObject
AngleArc
CreateDCA

Exports

Exports

Loieqempn
IsYtqsxigne

Sections

CODE
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ