4e35d6a680a5c3ef33ab9ad30f586779 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e35d6a680a5c3ef33ab9ad30f586779
Size

75KB
MD5

4e35d6a680a5c3ef33ab9ad30f586779
SHA1

bde65be8e6d1c90c34084d6be0b5f1ddc418b515
SHA256

c630a2e253797fadada96f84e4cdb4db7e9370f84edf9d3ee0a3ff08faaf8064
SHA512

373fbd90274e68801e949af0d782fb78cddd907935ba888a52f4853ad66d7c26fc6c01a9b4cf305c1b1e744573a3d15e53ebefd0bfa12d78f96c00c9a6309a0d
SSDEEP

1536:2ofiuEZK0WWjx+2f//LmLt9YqU8MkSVWxeYV0bWyHWn6:xfMQM+2fLmLtWqU7VWlYWyHWn6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e35d6a680a5c3ef33ab9ad30f586779

Files

4e35d6a680a5c3ef33ab9ad30f586779
.exe windows:4 windows x86 arch:x86

459510f6d61d8deea3dc8969d14c11b0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
SetNamedPipeHandleState
VirtualProtectEx
ExitProcess

user32

DestroyCaret
GetActiveWindow
GetWindowLongW

Exports

Exports

InitAecliycp
Gglriyxgpd

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lko2l1
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lko1l1
Size: 67KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ