4d79d3fcf10aec230c1fd0184634bbff | Triage

Sharing

General

Target

4d79d3fcf10aec230c1fd0184634bbff
Size

110KB
MD5

4d79d3fcf10aec230c1fd0184634bbff
SHA1

ce0d18ae964d318fb2eb196dbf4a47a2a7271c66
SHA256

0293677c1a6195e9f84b707e5cbc8e304973a0a229f2692c2bdd4f4486a705bd
SHA512

8924a4dd92f0f5a914c9e013bcf3ca9399c1435a0f435d500212dd904de2d185e6ca9995e81e5454cdf152d02e8548a9b2b218857ca6f3c5dfe436f872a0fedb
SSDEEP

1536:6d59SCAwjIEKY21POuO0TSwO4mdZsGHKbFxw2XaDbg+mxD0OV9HC5aURDoq4OZZe:am4pfQ3BTDOjd4V9DEhRD68wb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d79d3fcf10aec230c1fd0184634bbff

Files

4d79d3fcf10aec230c1fd0184634bbff
.exe windows:4 windows x86 arch:x86

8a6b22af17884f1af8e16335b18ceda6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyW
RegEnumKeyW
RegEnumKeyExA
RegQueryValueW
RegQueryValueA

comctl32

ImageList_Destroy
ImageList_LoadImageA
ImageList_LoadImageW
DllGetVersion
ImageList_EndDrag
DrawStatusText
ImageList_Draw
InitCommonControls
MenuHelp

gdi32

ExtTextOutA
ExcludeClipRect
DeleteDC
RestoreDC
GetPixel

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 743B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ