4d4f1f4f8742cdaac03b43283d227273

Sharing

Copy URL Twitter E-mail

General

Target

4d4f1f4f8742cdaac03b43283d227273
Size

148KB
MD5

4d4f1f4f8742cdaac03b43283d227273
SHA1

e4e3c1eae85c4f5213ec059ae6d4ac454429067e
SHA256

89f2180c746732cd800f64618340faf5e02b435d74a224bb68a710ba225064ee
SHA512

59a586e22de34ffbb4aef989677413d5f15e713528eed447b34d98c5a4520b9a207b6f6c76367af7339511eb7bab0ffa41a3cade9ace043f8470528e897cb214
SSDEEP

3072:ME5fTo1VxD8lRPdlAxPLrNpQpdscRjDEQZVYygz+n2D:AlSdlAxzrNpELjYwYTzS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d4f1f4f8742cdaac03b43283d227273

Files

4d4f1f4f8742cdaac03b43283d227273
.exe windows:4 windows x86 arch:x86

2a999f2bd9979cf1af4a1a283e46f2ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsIconic
LoadCursorA
GetWindowLongW
GetMenuState
wsprintfA
GetClientRect
TranslateMessage
CreatePopupMenu
EnumWindows
CharNextA
GetWindowThreadProcessId
GetScrollInfo
CharNextW
IsWindowVisible
ReleaseDC
DrawMenuBar
GetKeyNameTextA
SetScrollPos
IsWindowUnicode
GetSysColor
GetWindowTextLengthA
CreateIcon
CheckMenuItem
InsertMenuA
DestroyIcon
IsMenu
IsDialogMessageA
IsRectEmpty
DestroyCursor
EmptyClipboard
CharUpperBuffA
GetMenu
GetSystemMetrics
IsWindow
GetForegroundWindow
SetCapture
DispatchMessageW
TrackPopupMenu
OffsetRect
GetScrollRange
DrawIconEx
MapWindowPoints
SetActiveWindow
GetClassInfoA
MessageBoxA
GetIconInfo
DefFrameProcA
PostMessageA
ScrollWindow
InsertMenuItemA
KillTimer
SetWindowPlacement
OpenIcon
GetWindowDC
SetPropA
GetKeyboardLayoutNameA
InvalidateRect
IsCharUpperA
IsWindowEnabled
IntersectRect
SetForegroundWindow
SetClassLongA

version

VerInstallFileA

kernel32

FindClose
SetThreadLocale
GlobalFindAtomA
FindFirstFileA
GetEnvironmentStrings
WriteFile
GetThreadLocale
lstrcpyA
WideCharToMultiByte
GetCurrentThreadId
ExitProcess
GetSystemDefaultLangID
GetModuleHandleW
lstrlenW
ExitThread
GetLocalTime
LoadLibraryA
GlobalAlloc
VirtualAlloc
HeapFree
SetLastError
RaiseException
GetDateFormatA

shlwapi

SHDeleteKeyA
SHGetValueA
SHStrDupA
SHEnumValueA
PathIsDirectoryA
PathGetCharTypeA

Exports

Exports

YF6yK8M3p

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a999f2bd9979cf1af4a1a283e46f2ef

Headers

File Characteristics

Imports

user32

version

kernel32

shlwapi

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 10KB - Virtual size: 114KB

.data Size: 100KB - Virtual size: 99KB

.edata Size: 4KB - Virtual size: 3KB

.badata Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 10KB - Virtual size: 114KB

.data
Size: 100KB - Virtual size: 99KB

.edata
Size: 4KB - Virtual size: 3KB

.badata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 8KB