4e62f52b7293491f4bafdf6cf89ecbba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e62f52b7293491f4bafdf6cf89ecbba
Size

59KB
MD5

4e62f52b7293491f4bafdf6cf89ecbba
SHA1

9c7193ee1ad133ef09945c48ac4a2039ee98314a
SHA256

5d11c59304d639b7d80543162db00b691a46200659dd4b73865d2bd3f09498e0
SHA512

0b3ccb82d6bfa2a1a22956446cb398bcb5b63c73654369fa252170a7d31de22d1e49904691e2a544c71aeb8986072e012f4a49b12289f57127408d0d4b7f2a3a
SSDEEP

1536:FzVlcxIm6l8v6un2zxfa+1fFg/KkLdiLjNUyQKCoKcq:JVlAPOfdUCk4+yjeL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e62f52b7293491f4bafdf6cf89ecbba

Files

4e62f52b7293491f4bafdf6cf89ecbba
.exe windows:4 windows x86 arch:x86

9779950fff804cd5c7d9b4c13507777e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcessHeap
GetConsoleCP
HeapFree
Sleep
LoadResource
IsDebuggerPresent
lstrcmpiA
GetEnvironmentStrings
GetCurrentProcess
LoadLibraryA
EnterCriticalSection
SetProcessWorkingSetSize
CompareStringW
SetFilePointer
GetSystemInfo
GetStringTypeA
ResumeThread
CloseHandle
GetDriveTypeA

msvcrt

__dllonexit
strcat
_XcptFilter
_vsnprintf
realloc
_wsplitpath
fprintf
__set_app_type
memcpy
_ltoa
wcscpy
_stat
fopen
atol

user32

CreatePopupMenu
GetMenuItemID
GetWindowDC
DestroyIcon
LoadIconA
LoadAcceleratorsA
GetWindowRect
ShowWindow
FindWindowA
SetWindowTextA
wsprintfA
ChildWindowFromPoint
GetClassNameA

ole32

CoFreeLibrary
OleCreateEmbeddingHelper
OleCreate
CoFreeAllLibraries
OleCreateEx
OleCreateLinkToFileEx
CoUnmarshalInterface
OleLockRunning
CoRegisterMallocSpy

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ