4a7a7a4f5f02f8165479d6c84438c2a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a7a7a4f5f02f8165479d6c84438c2a5
Size

63KB
MD5

4a7a7a4f5f02f8165479d6c84438c2a5
SHA1

2ebb82e4b87dcd591a0187f440225d5247699029
SHA256

58d6cb0cce1a43d75139a016ec1d4859ede16c05d95ed999e3dbe267e4434576
SHA512

525cee022ebcc5c063c078b641d64c94fba4f48f49c2f34ed69e1c05707cb6953d6d6af346f984926c17b6adcf338f1d870a29507b411714b198548a29f9a236
SSDEEP

1536:uufg6xNUQs0ZEjMPcqHmbBhvI1qWfiuv7tPS0xLDvk:x3xNvaIPk+qWpL1vk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a7a7a4f5f02f8165479d6c84438c2a5

Files

4a7a7a4f5f02f8165479d6c84438c2a5
.exe windows:4 windows x86 arch:x86

7c3c81c20b3a83a6b12dc984bdc16b5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollInfo
GetSubMenu
GetScrollPos
CharLowerA
GetPropA
GetCapture
IsWindowEnabled
GetScrollRange
GetCursor
GetMenu

kernel32

VirtualQuery
LoadLibraryA
GetProcessHeap
VirtualAllocEx
WaitForSingleObject

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayPtrOfIndex
VariantChangeType
SafeArrayGetUBound
RegisterTypeLib
SafeArrayCreate
SysReAllocStringLen
VariantCopyInd
SysFreeString

gdi32

CreateBrushIndirect
CreateCompatibleDC
SelectPalette
GetDIBColorTable

Exports

Exports

d8mFDMC8
zXyrHd@24
N9It4VWL@8
PtNHc
L26kJXPRMU
_vaRRvJ7
zFUYWG@8
_Qqrrbod@12
_aPNvF@24
_Gzibf6nPd
__fQH1F
qylZ_6LOX
rcKG76r4JzY
XmbdhUfcGn@16
_2DZaZIIvXW87@4
_uSkun8j2ofF@12
jzn0XtkJ0BMQF

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ