4dfdcf9e030d2d2ecc653519cc14cb9a

Sharing

Copy URL

Twitter E-mail

General

Target

4dfdcf9e030d2d2ecc653519cc14cb9a
Size

200KB
MD5

4dfdcf9e030d2d2ecc653519cc14cb9a
SHA1

1b4a85869bb1b8103fb04032de24f9c1fa0ad13a
SHA256

b85ec4bf28fdad66138088a7f31539133fdadf9e131827cf9be19c47bf2b139a
SHA512

7e578c6ac8ab305bb2143304d146515205da1ebc284f316dc1a1ac1de6c3b34213bf5e64ae8e86782d41f50df406893cf23bf2bfa5d279c3b610719ae7b304aa
SSDEEP

3072:mpeJgLILq2oTn/+YKfXt+/XHLKtNJRzDo8NSBHEeOf0CNCW2LaQ+jvYfimaEXzkP:mprsEGLvtKXrKvJNKJEpbZ2LagJIGk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dfdcf9e030d2d2ecc653519cc14cb9a

Files

4dfdcf9e030d2d2ecc653519cc14cb9a
.exe windows:4 windows x86 arch:x86

507ecf81869aa76c70fdd628a849739f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetFileType
GetStdHandle
SetHandleCount
GetProcAddress
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeResource
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetStringTypeA
GetStringTypeW
GetLastError
MulDiv
LoadLibraryA
lstrcpynW
lstrcpyW
FindResourceA
LoadResource
GetEnvironmentStringsW
LockResource
GetVersion
GetCommandLineA
SetConsoleCtrlHandler
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapReAlloc
RtlUnwind
HeapAlloc
lstrlenW
lstrlenA
GetModuleFileNameA
GetSystemTime

user32

GetWindowDC
GetWindowRect
GetSystemMetrics
DestroyMenu
TrackPopupMenuEx
AppendMenuA
CreatePopupMenu
RemoveMenu
GetMenuItemCount
GetSystemMenu
DrawMenuBar
GetDC
SetWindowRgn
FillRect
GetDoubleClickTime
SetDoubleClickTime
CreateWindowExA
ShowWindow
IsWindowEnabled
MoveWindow
DestroyWindow
WindowFromPoint
GetCursorPos
DrawCaption
OffsetRect
DrawEdge
DrawFocusRect
DrawFrameControl
DrawTextA
SetRect
GetSysColorBrush

gdi32

ExtTextOutA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkMode
DeleteObject
TextOutA
CreateEllipticRgn
GetDeviceCaps
CreateFontA
GetTextExtentPoint32A

comdlg32

PageSetupDlgW
PageSetupDlgA
PrintDlgA
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
PrintDlgW

advapi32

GetUserNameW
IsValidSid
GetUserNameA

Sections

.text
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

507ecf81869aa76c70fdd628a849739f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 36KB - Virtual size: 32KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 148KB - Virtual size: 144KB

.text
Size: 36KB - Virtual size: 32KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 148KB - Virtual size: 144KB