4ddba3658fa36d61a1a71c7dbe4fd48d | Triage

Sharing

General

Target

4ddba3658fa36d61a1a71c7dbe4fd48d
Size

381KB
MD5

4ddba3658fa36d61a1a71c7dbe4fd48d
SHA1

20a073f58c709cbf5c634ee4d897d0b01a2cac8c
SHA256

24960ec9dafced3511b5646014c8f003beb4184722ae6628870bd30ed131503e
SHA512

121962d4e7e955280cf12f643763be0ca3f1e48c4cdc9faa28282ba6faab8a5230046b8bf7ecc82f4901ea9cb42d35be8feb965d36035dbe2a9dcd9d721cb8ff
SSDEEP

6144:x+crUfplvucEdjBw0nMLWHugFiefpGfxB1r1Wgr9EjqY/mvYgUOSaSjcJyo:/o/uciSxg0qAfxB51bCv/o7SaLyo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddba3658fa36d61a1a71c7dbe4fd48d

Files

4ddba3658fa36d61a1a71c7dbe4fd48d
.exe windows:4 windows x86 arch:x86

3eb07b4a9b121cf3b179088258982887

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winmm

timeGetTime

Sections

CODE
Size: 358KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE