4e4a93882812bfc26dd76471b8d7c805 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e4a93882812bfc26dd76471b8d7c805
Size

57KB
MD5

4e4a93882812bfc26dd76471b8d7c805
SHA1

b43e77ad30d104a16478584908425f55dd8eb3ab
SHA256

f260fceec26fff769163b3a37f6bf61090e64cfde90dd5df903abc4fe21acf06
SHA512

d64ccd80f2fbf6c0f99ce18788e169d843b413a58dbf84adadba9eb098a8ed5703846a8f3c760e5cb789884b00c13e5a1feb1cb3d03c714f110ac77552830d9e
SSDEEP

1536:vqmVQibmtuajmiVaQcJCWzgymYN6BAZvUXH1n:vRbSAajmisBrC2ZvUX1n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e4a93882812bfc26dd76471b8d7c805

Files

4e4a93882812bfc26dd76471b8d7c805
.dll windows:4 windows x86 arch:x86

d99ee2a315abf07df08f7300222add91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

DestroyWindow
DestroyCaret
CreateMDIWindowA
CreateDesktopW
CopyRect
CloseWindow
CharUpperBuffA
ChangeMenuA
ActivateKeyboardLayout

kernel32

GetSystemTimeAsFileTime
lstrcpynA
lstrcmpiA
lstrcmpA
VirtualFree
VirtualAlloc
TlsSetValue
TlsAlloc
Sleep
SetLastError
CompareStringA
EnumResourceLanguagesW
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
GetLastError
GetPrivateProfileStringA
GetSystemTime
InitializeCriticalSection
LeaveCriticalSection
LocalAlloc
MapViewOfFile
OpenFile
OpenFileMappingA
RtlUnwind
SetCurrentDirectoryA

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE