4b756be9e903baef104e049d4c49f6e9

General

Target

4b756be9e903baef104e049d4c49f6e9
Size

184KB
MD5

4b756be9e903baef104e049d4c49f6e9
SHA1

d8f4ad1b91725d03cd438789ca611a4d0f1f49b3
SHA256

6da57a9782179f5f4b5e201ae6ff003b0079e23daa1a1d8a69c2d8cb608c838e
SHA512

76b2df275e9c41fa49ac33a0bf83afb0b8c82c174a7034a6b44e7fa3e53f7338d3eb6462c3a01565ef123102912c952943628970744b1a6c49649fdf155fd8dd
SSDEEP

3072:OSqAAKl3evu9YedcKspTigA9BT6ecfxiCSeWQBikbPfqmDfgmwGRVFGFbU:Hq9MWoDydpRGdY6QBikjqmDJVRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b756be9e903baef104e049d4c49f6e9

Files

4b756be9e903baef104e049d4c49f6e9
.exe windows:4 windows x86 arch:x86

d6760a06c7dbc2fa4bf211112fb69bad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCpyW
StrCatW

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
lstrlenW
LocalAlloc
FormatMessageW
LocalFree
GetLastError
CloseHandle
CreateFileW
WriteFile
VirtualProtect
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleHandleW
WinExec
GetSystemDirectoryW
WideCharToMultiByte
MultiByteToWideChar
GetProcAddress
RaiseException
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
ExitProcess
GetSystemInfo
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
HeapSize
IsBadReadPtr
IsBadCodePtr
SetFilePointer
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
FlushFileBuffers
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetStdHandle
LCMapStringA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d6760a06c7dbc2fa4bf211112fb69bad

Headers

File Characteristics

Imports

shlwapi

kernel32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 140KB - Virtual size: 137KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 140KB - Virtual size: 137KB