4dc9d17646b0874b696faffa49344129

Sharing

Copy URL Twitter E-mail

General

Target

4dc9d17646b0874b696faffa49344129
Size

128KB
MD5

4dc9d17646b0874b696faffa49344129
SHA1

d4f96aceee3d6fb5dcf35e2cb0040177e67068c0
SHA256

0a3a52a46e93cdc393287cb94eee2aef8c40c6f9feb079f6375575b70687d7a6
SHA512

b3cc4e9d7696bebdd11767058a8d77948c889607836fd34bae899b246e09afb47202d524cfda053335a9afbcda1478e4253fda9688842bca78b156060d03e2d5
SSDEEP

3072:+7x3IpZNZRJFowDaT2phY7Nj4C19vT/QY6FfrL5fU9:iGpXZRzowI2/Y7d9sO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc9d17646b0874b696faffa49344129

Files

4dc9d17646b0874b696faffa49344129
.exe windows:4 windows x86 arch:x86

1d538b791870381a020333e45d8265bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
FileTimeToDosDateTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
LocalFileTimeToFileTime
GetVersion
GetLocalTime
SetLocalTime
CreateProcessA
GetExitCodeProcess
WaitForSingleObject
CloseHandle
GetDiskFreeSpaceA
FindFirstFileA
FindNextFileA
FindClose
GetFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFullPathNameA
GetShortPathNameA
SearchPathA
GetEnvironmentStringsA
FreeEnvironmentStringsA
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
FillConsoleOutputAttribute
GetConsoleMode
SetConsoleMode
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
SetConsoleCursorInfo
WriteConsoleOutputA
CreateFileA
FillConsoleOutputCharacterA
Sleep
GetStdHandle
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
GetCurrentThreadId
CreateEventA
SetEvent
OpenProcess
Sleep
WaitForSingleObject
CreateMutexA
ReleaseMutex
GetStdHandle
GetConsoleScreenBufferInfo
CreateFileA
ReadConsoleOutputCharacterA
ReadConsoleOutputAttribute
ReadConsoleOutputA
GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
DeleteFileA
MoveFileA
SetFilePointer
GetFileSize
CreateFileA
SetEndOfFile
GetFileType
CreateDirectoryA
RemoveDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter

user32

MessageBeep
CharToOemA
BroadcastSystemMessageA
SendMessageA
MessageBoxA

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 261KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.stabstr
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d538b791870381a020333e45d8265bc

Headers

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 64KB - Virtual size: 63KB

.data Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 261KB

.idata Size: 3KB - Virtual size: 2KB

.stab Size: 2KB - Virtual size: 1KB

.stabstr Size: 2KB - Virtual size: 1KB

.text
Size: 64KB - Virtual size: 63KB

.data
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 261KB

.idata
Size: 3KB - Virtual size: 2KB

.stab
Size: 2KB - Virtual size: 1KB

.stabstr
Size: 2KB - Virtual size: 1KB