4b2204dd455e593ff6cc3d9267273f9e

General

Target

4b2204dd455e593ff6cc3d9267273f9e
Size

20KB
MD5

4b2204dd455e593ff6cc3d9267273f9e
SHA1

6f798680f00add700c7254c0e35406d8271f95a1
SHA256

f7bbab2d3a4188627fa4016e0eda2867a57c3ba4e06f5435f932e2327fb499d1
SHA512

b3d623ba2a1317c677f5b90d4abfaabd6bf59301aed038cee330ecb7227ef3e512ce71456585d1ac2de9142fe99a0f72cdfe86d53e205c64bbd6c6e59bf0814f
SSDEEP

384:viG1eH9xTfY+Gba10YBsXvCsh2aXKFvbrIeK9:KG1qzU5b571jXKFz0eK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2204dd455e593ff6cc3d9267273f9e

Files

4b2204dd455e593ff6cc3d9267273f9e
.dll windows:4 windows x86 arch:x86

bb796805eb6c8cb68b258e237d246391

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalLock
GlobalAlloc
GetCommandLineA
Sleep
GetCurrentProcessId
ReadProcessMemory
GetCurrentProcess
IsBadReadPtr
GetProcAddress
GetModuleHandleA
WriteProcessMemory
TerminateThread
GlobalUnlock
ExitProcess
TerminateProcess
OpenProcess
GetCurrentThreadId
CreateRemoteThread
GlobalFree
VirtualAllocEx
DeleteFileA
CreateFileA
WriteFile
GetFileSize
ReadFile
VirtualProtectEx
SetThreadPriority
VirtualAlloc
VirtualFree
Process32Next
Process32First
CreateToolhelp32Snapshot
WinExec
GetTempPathA
GetModuleFileNameA
OpenEventA
CreateEventA
CreateThread
VirtualFreeEx
CloseHandle

user32

GetInputState
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
GetWindowThreadProcessId
FindWindowA
PostThreadMessageA
GetWindowTextA
GetMessageA

wininet

InternetCloseHandle
InternetOpenA
InternetOpenUrlA

urlmon

URLDownloadToFileA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb796805eb6c8cb68b258e237d246391

Headers

File Characteristics

Imports

kernel32

user32

wininet

urlmon

advapi32

Sections

.text Size: 17KB - Virtual size: 17KB

sdata Size: 512B - Virtual size: 512B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

sdata
Size: 512B - Virtual size: 512B

.reloc
Size: 1KB - Virtual size: 1KB