4d5a01f1ceb25386d17dd4bd220f3914 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d5a01f1ceb25386d17dd4bd220f3914
Size

194KB
MD5

4d5a01f1ceb25386d17dd4bd220f3914
SHA1

af025af34a3960d6bd2caf80b2d20218cfbe57bf
SHA256

145d2ec51e6a9c6c992b211e916c74a932072290b9325a5b7a03bc9f695f0e61
SHA512

49be566e95f20988b8a84a2c823bcedc0e2bb393faacbad97ae340f3a97dbdda941a8453154fc09af737172819f4b71ce3bdda4634db2645e22dbaaf29f1203e
SSDEEP

3072:tNwMlCgXvqBKvRYyCnpH//7Hf5X+AN3/f2KpgUMO9WuI648ldw33/VefLibD:LJ1XiBKv69/5X+AgKpV3Ip8ldwH8Lib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d5a01f1ceb25386d17dd4bd220f3914

Files

4d5a01f1ceb25386d17dd4bd220f3914
.exe windows:4 windows x86 arch:x86

7652ffa60974da39227e039bb4c38372

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

HlinkNavigateString

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 160KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE