4ba11a11b0cd568281e65fcb7671d0cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba11a11b0cd568281e65fcb7671d0cd
Size

359KB
MD5

4ba11a11b0cd568281e65fcb7671d0cd
SHA1

593e54d5464e0c76372af85d86594073eb41621b
SHA256

e2f5bbd09a437efcbe4028fd8ecafee8368267c731e104783be56ea036dc859d
SHA512

1e91ee94957e81e9102db431d6655a986d6064719a188b24f36b83f6ff48b4e912806aa560333a65826361044d6a82d3734e1bb340a67cfa623c30a735ba2fc8
SSDEEP

3072:FtUvRDJbX+Y8vduyB1mZbZXz/M23/dCTYp78g3KOxchHXLLUYOAA4jZBdYgY2ep4:bUJDJSjmZNXAs6OjAA4XdYgSpfB04+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba11a11b0cd568281e65fcb7671d0cd

Files

4ba11a11b0cd568281e65fcb7671d0cd
.dll windows:4 windows x86 arch:x86

174d0a1767e52c84a948af935562a17b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalFree
lstrcpyW
lstrcpynW
GlobalAlloc

user32

wsprintfW

ole32

CoCreateInstance

Exports

Exports

GetShortCutArgs
GetShortCutDescription
GetShortCutHotkey
GetShortCutIconIndex
GetShortCutIconLocation
GetShortCutShowMode
GetShortCutTarget
GetShortCutWorkingDirectory
SetShortCutArgs
SetShortCutDescription
SetShortCutHotkey
SetShortCutIconIndex
SetShortCutIconLocation
SetShortCutShowMode
SetShortCutTarget
SetShortCutWorkingDirectory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 886B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ