4def4ddba40e11df24d6f10447676eae | Triage

Sharing

General

Target

4def4ddba40e11df24d6f10447676eae
Size

520KB
MD5

4def4ddba40e11df24d6f10447676eae
SHA1

dfeca41d7e103f6f8175dd7a256b39747d8cce23
SHA256

3ab114207384aff54a61e522aae0f0af5d14a34421f881a8c450472693d17a49
SHA512

0d43ce0f730ada9eed3badf123ea8b678ef9a77b60204eacb6b0849c9f534484e99634444cd0c1cf220cc3b24c744fef1b12f07f02d06912e78aff2ed60cb778
SSDEEP

12288:IO0crBSWN3aFAmeGytrgv2reFrq3yZzITU6ztZs:IOzAY35msg+reEm2bt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4def4ddba40e11df24d6f10447676eae

Files

4def4ddba40e11df24d6f10447676eae
.exe windows:4 windows x86 arch:x86

2c9f2016eb41f36442a6f0ade2c2d110

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA

msvcrt

fwrite
free
malloc
fclose
fopen
_c_exit
_exit
_XcptFilter
ldiv
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
srand
rand
sprintf
atoi
div
isalnum
isalpha
isdigit
isgraph
islower
isprint
ispunct
isspace
isupper
isxdigit
ceil
_cexit

kernel32

lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
DeleteFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ