4cab9ce18233fa0c9566693b9d9fa865

General

Target

4cab9ce18233fa0c9566693b9d9fa865
Size

178KB
MD5

4cab9ce18233fa0c9566693b9d9fa865
SHA1

a966e58c415b2b4c9b2a9329ec54cd9db3470ddd
SHA256

5fc141957a834fe14761e26d780435b0ccd09b18af932c3cf1e73c637f992cb4
SHA512

61845b33a08ed3736730e6dba84768229360b83ba178c76c18dfbc9c249c37105fb29d143aa64b334f5d236433ae3ca1f3b6555f599fe68ccda8a61aafba8f70
SSDEEP

3072:HWiAkxwBeymUrjDzDQSn0oq2SJcRJVZdXQk9cGZIF3NdPd8ThFPUXX:IB4yjDzzqYBPzqF6vUX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cab9ce18233fa0c9566693b9d9fa865

Files

4cab9ce18233fa0c9566693b9d9fa865
.exe windows:4 windows x86 arch:x86

87a5e2fb8e1ae0ea6ab7a4ae4db9b972

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA

kernel32

FindFirstFileA
FindNextFileA
GetProcAddress
FlushInstructionCache
GetPrivateProfileStringA
GlobalAlloc
MultiByteToWideChar
WriteFile
WaitForSingleObject
ReadFile
SetFilePointer
DeleteFileA
EnumResourceNamesW
FreeLibrary
SetupComm
LoadLibraryExA
MulDiv
GetExitCodeProcess
GetModuleHandleA
FindClose
WritePrivateProfileStringA
GetWindowsDirectoryA
GlobalFree

rpcrt4

NdrComplexArrayFree
UuidCreate

shell32

SHFileOperationA
SHGetFileInfoA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderLocation
SHGetPathFromIDListA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comctl32

ImageList_Destroy
ImageList_Create
ImageList_AddMasked

ole32

CoCreateInstance
OleInitialize
OleUninitialize
CoTaskMemFree

Sections

.text
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87a5e2fb8e1ae0ea6ab7a4ae4db9b972

Headers

File Characteristics

Imports

advapi32

kernel32

rpcrt4

shell32

version

comctl32

ole32

Sections

.text Size: 109KB - Virtual size: 108KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 65KB - Virtual size: 65KB

.reloc Size: 1024B - Virtual size: 112KB

.text
Size: 109KB - Virtual size: 108KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 65KB - Virtual size: 65KB

.reloc
Size: 1024B - Virtual size: 112KB