4b324959aa8ec9b4e8d5d40c7f0e73ea | Triage

Sharing

General

Target

4b324959aa8ec9b4e8d5d40c7f0e73ea
Size

447KB
MD5

4b324959aa8ec9b4e8d5d40c7f0e73ea
SHA1

12dbb315bf8fd5c4a0781c9d639a3a12701e78ec
SHA256

c18eea76399c0a4d0fe5ffec5d77ac08e78be356e772e29c5449d956b4cb9d61
SHA512

d291ec6a36a4ee1edcb8e7a5e3c4a391c84dd42c5a96b3c42708e933d38d8c861d54422ff92c221700b0632b85b6c7d8e03fe8b88cbf9fa7a2fcf15c07212fe5
SSDEEP

12288:qphHvH8YGdXHlpFQn8FF9myRqU/uXMwZv7wOqvYJ/EmZ:ohHvH8Y8XHlQn8b9muqU/G/vcOqwJlZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b324959aa8ec9b4e8d5d40c7f0e73ea

Files

4b324959aa8ec9b4e8d5d40c7f0e73ea
.exe windows:4 windows x86 arch:x86

d571aa95ad743fe41ddd649d681448e7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
LoadLibraryA

advapi32

RegCloseKey

cfgmgr32

CM_Get_DevNode_Status

comctl32

ImageList_Add

gdi32

SaveDC

oleaut32

VariantCopy

version

VerQueryValueA

Sections

.text
Size: 107KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE