4cad1d3d8b69c142f39ef87e9baab242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cad1d3d8b69c142f39ef87e9baab242
Size

569KB
MD5

4cad1d3d8b69c142f39ef87e9baab242
SHA1

7e87849191480f026c4f564234f56096602da8f0
SHA256

91b9197da7f9c0fb1065f736adf4218acfb31254fcc6fb16ae6f5ba380d0b940
SHA512

ae72d7de99721e9becd09a9a12a406f2a86d33ed53521071d5b3ec6f40334f6fe4aa31ae0b6ec3409d3e850f0fbf17d30364d8124299dfca2444db0657382f3e
SSDEEP

12288:0LVmO6sPzrbsgsNXLfkmcMZkl0G0UGQaVApA9GVZo3XLUicT5J9eW:0LVmO5TsgwL8m5ZklTcGtY3XT6SW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cad1d3d8b69c142f39ef87e9baab242

Files

4cad1d3d8b69c142f39ef87e9baab242
.exe windows:4 windows x86 arch:x86

3e3d31a1ce5945ad1b25552b9d9e0a30

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

GetOpenFileNameA

netapi32

Netbios

shlwapi

SHAutoComplete

Sections

CODE
Size: 534KB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE