4ece6272d5070c9337b5fcb1cdaacec5 | Triage

Sharing

General

Target

4ece6272d5070c9337b5fcb1cdaacec5
Size

100KB
MD5

4ece6272d5070c9337b5fcb1cdaacec5
SHA1

0129b591032eace3af30bcd9c0179917b60d31fe
SHA256

536780b4772c1f8526ceec26837e8184afd823a8ccc9e8b16f10700ef85377dc
SHA512

594c6a86f23cbb3b2072935b994268d910bba73afe9fccc227ab6ec223f98a3fe921bb2e7f93ecdd9c98301750b8186ad7696aa7b9f45bd633321fd8ada5a78d
SSDEEP

1536:yipZ9YvmvuEVWsFXRAej9KbVcHbZXxpTWtGlsNwFZI5g24fwdhWWxw/Z4Ro7:yi3MeVvFBjKh6NBpTWMxFZ+gQBU4C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ece6272d5070c9337b5fcb1cdaacec5

Files

4ece6272d5070c9337b5fcb1cdaacec5
.exe windows:4 windows x86 arch:x86

55f397dc13e52c6c736be1516594ab86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
SetFilePointer
DeleteFileA
GetLastError
GetTickCount
GetCurrentProcess
CreateProcessA
GetModuleFileNameA
ReadFile

ole32

CoInitialize
OleCreate
CoUninitialize

user32

DispatchMessageA
CreateWindowExA
TranslateMessage
GetMessageA
GetSystemMetrics
ShowWindow
MessageBoxA
PostQuitMessage
DestroyWindow
SetWindowLongA

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1018B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ