4ab51b004f54752785bedab90b9d35c6

General

Target

4ab51b004f54752785bedab90b9d35c6
Size

288KB
MD5

4ab51b004f54752785bedab90b9d35c6
SHA1

287cbd0ccddcd74c6ce5623e6101f498d386f1d9
SHA256

03f22de6cef72d5ac2d1be6ebea6819b0f9b99218b3e8889d4be707a709d84f8
SHA512

7d4d6526325123d667c93c475004107886a932413e49a01343d960f762bbe62024d0e658b10bc70d2a085ee687f61134648d6bd021b130c97c2275041527e19e
SSDEEP

3072:mU0h70N3VbW3pLGUfvmbovsU7XJXepbFTcj/izb/+XAiOg2TrVPv40tphWhk2i3I:mD70PQLVv+lmX0FTcjaGdOgg3ihk2sz0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab51b004f54752785bedab90b9d35c6

Files

4ab51b004f54752785bedab90b9d35c6
.exe windows:4 windows x86 arch:x86

d72e51f2425cf41d79631c65190d7005

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreatePopupMenu
TranslateMessage
UnregisterHotKey
CreateMenu
DeferWindowPos
IsDialogMessageW
LoadBitmapW
CheckDlgButton
SetWindowTextW
GetIconInfo
GetWindowRect
DialogBoxIndirectParamW
RegisterWindowMessageW
GetSysColorBrush
DefWindowProcW
GetForegroundWindow
CreateDialogIndirectParamW
GetWindowThreadProcessId
GetClientRect
BeginDeferWindowPos

mgmtapi

SnmpMgrCtl
SnmpMgrOidToStr
SnmpMgrGetTrapEx
SnmpMgrRequest

msvcrt

_onexit
__dllonexit
_controlfp
_ftol
realloc
free
malloc
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

kernel32

LocalFree
LoadLibraryA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetProcAddress
VirtualAlloc
VirtualFree
ResetEvent
CreateDirectoryW
HeapCreate
HeapAlloc
HeapFree
CreateFileW
GetLocalTime
HeapWalk
VirtualProtect
IsProcessorFeaturePresent
ExpandEnvironmentStringsW

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d72e51f2425cf41d79631c65190d7005

Headers

File Characteristics

Imports

user32

mgmtapi

msvcrt

kernel32

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 56KB - Virtual size: 54KB

.data Size: 76KB - Virtual size: 493KB

.rsrc Size: 4KB - Virtual size: 1KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 56KB - Virtual size: 54KB

.data
Size: 76KB - Virtual size: 493KB

.rsrc
Size: 4KB - Virtual size: 1KB