4bbde5c3dc3996d4891f753a49e6bb0f | Triage

Sharing

General

Target

4bbde5c3dc3996d4891f753a49e6bb0f
Size

380KB
MD5

4bbde5c3dc3996d4891f753a49e6bb0f
SHA1

1b638e1a7663649f8301074b8b7f96572b79c5b2
SHA256

6183838edbc2ec9888857500af37948ce09e2dacc23b4f08991a05fe58cae8e5
SHA512

ca79718355f0af3ff4d6c60c70cc68825a352b1fbd9f0a6ea69bd880c781c7de96ab6aed3bf09ddd970f836142b5919f05fb27c173cb2ac2b72fd43ed4195366
SSDEEP

6144:RZKywEEZrzuDIQFiWo//pJYoqquqPFz5Oa6JXcivFDnZeVWzvg:RZ0tDNWw/pOqPz5Oa6WSZHzvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bbde5c3dc3996d4891f753a49e6bb0f

Files

4bbde5c3dc3996d4891f753a49e6bb0f
.exe windows:4 windows x86 arch:x86

98371700c863839d6673410528dc1d6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
CreateDirectoryA
ExpandEnvironmentStringsA
EnumDateFormatsExA

user32

IsCharAlphaNumericW
SendMessageA
LoadIconA
IsDialogMessageA

gdi32

GetOutlineTextMetricsA
GetTextExtentPointA
EnumFontFamiliesExA

Sections

.rsrc
Size: - Virtual size: 162KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 459B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ