4c002e48fac2babcd9d33ec610cd57ac | Triage

Sharing

General

Target

4c002e48fac2babcd9d33ec610cd57ac
Size

6KB
MD5

4c002e48fac2babcd9d33ec610cd57ac
SHA1

3a281c746bebad85f2cc4ce6091414ca2aa0b54a
SHA256

1647a017cf1d36a06831741e4cb6363902c6b5d8bf360afb004f07ca97c03d24
SHA512

ad784d9988e18b194c32e358a00c14c20f0a6736009a9d2e1a3bfaf9f7a93e90755544e3ae33991deecf96abf28b73b170d165d403e6069de947c8e79ade987c
SSDEEP

96:LCpG1vSRhKilPiEsWLrx1ZywLvLw+EO3H/FEfDMZfJN8IfDP7:LCpGpSGlEsWLrx1NLvLVECH9EfDM1JN9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c002e48fac2babcd9d33ec610cd57ac

Files

4c002e48fac2babcd9d33ec610cd57ac
.dll windows:4 windows x86 arch:x86

5579878e73b6311b16b6bc385f62683b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcatA
lstrcpyA
lstrcpynA
lstrlenA
GetCurrentProcess
GetModuleFileNameA
ExitProcess
lstrcmpiA
CloseHandle
CreateThread
GetSystemDefaultLangID
Sleep
SetFileAttributesA
ReleaseMutex
GetLastError
CreateMutexA
DeleteFileA
GetWindowsDirectoryA

user32

GetWindow
GetWindowLongA
CallWindowProcA
EnumChildWindows
GetWindowTextA
GetForegroundWindow
SetWindowLongA

shell32

ShellExecuteA

msvcrt

_swab
_strrev
strstr
sprintf

winmm

timeSetEvent
timeKillEvent

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

shlwapi

PathIsDirectoryA

psapi

GetModuleBaseNameA

urlmon

URLDownloadToFileA

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ