4e870569400c297608a283cbe5360e88

General

Target

4e870569400c297608a283cbe5360e88
Size

126KB
MD5

4e870569400c297608a283cbe5360e88
SHA1

afad60c9be598c75d449646cbf1f9f2759c37c1c
SHA256

5bf5c3a0e7f909517912802f9e5dbf5b73f8a7e61b79f6470ab3d20b1bae05be
SHA512

dca5b35e319fef139ab2c46e8fa8f269ad6e92932b82766ade18bb7253e1364608e0c10dfade3228c7450e97d35955d56d13933c7284ea0a471954cdfcc0fad9
SSDEEP

3072:sHbhq0/DbmkGPo9St8WHxSD+09+SaqQ9m4D:s7h5cf8CA0SaqQk4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e870569400c297608a283cbe5360e88

Files

4e870569400c297608a283cbe5360e88
.exe windows:6 windows x86 arch:x86

8b7e2ee81565f21f95badb244f9c56e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

TraceMessage
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids

kernel32

LocalAlloc
LocalFree
HeapSetInformation
GetCommandLineW
DelayLoadFailureHook
GetProcAddress
GetLastError
FreeLibrary
InterlockedCompareExchange
LoadLibraryExA
RegOpenKeyExW
lstrlenW
RegEnumValueW
RegQueryInfoKeyW
RegCloseKey
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedExchange

user32

TranslateMessage
GetMessageW
DispatchMessageW

msvcrt

_except_handler4_common
?terminate@@YAXXZ
_controlfp
__set_app_type
__p__fmode
__setusermatherr
_amsg_exit
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
memset
wcsstr
towupper
wcschr
_initterm
__p__commode
_vsnwprintf

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

shell32

CommandLineToArgvW

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8b7e2ee81565f21f95badb244f9c56e6

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

msvcrt

ole32

shell32

Sections

.text Size: 27KB - Virtual size: 26KB

.data Size: 512B - Virtual size: 976B

.rsrc Size: 69KB - Virtual size: 68KB

.reloc Size: 28KB - Virtual size: 29KB

.text
Size: 27KB - Virtual size: 26KB

.data
Size: 512B - Virtual size: 976B

.rsrc
Size: 69KB - Virtual size: 68KB

.reloc
Size: 28KB - Virtual size: 29KB