4ec8a1ae621392d10b5554c6730e836a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ec8a1ae621392d10b5554c6730e836a
Size

176KB
MD5

4ec8a1ae621392d10b5554c6730e836a
SHA1

1c97d110dd75c62da43d6634eb898c05da9f835a
SHA256

4e36390604fa3d009610ab47256fdc59105ebba72274623fe9948a7b55ac03ee
SHA512

0023724ae55ace0c779de307906daf595f4aeedbb1649ca36d28926b7cf424a21281ad763aa83af0b0003ca5372314fe51c90d7013be71cb9a7e65caafd0674a
SSDEEP

3072:pXFbzxyts0kgkzMrL5/Y5kBOMbZ+U/6OsWXKKpMu5nVuTZQUafjjesYIUwgs1:nbzj0FnRgCvZ+UyoXKKp19V+ZQUaLCsh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ec8a1ae621392d10b5554c6730e836a

Files

4ec8a1ae621392d10b5554c6730e836a
.exe windows:4 windows x86 arch:x86

517c7af675c3e13593e26d4aad6bb951

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

shell32

SHGetSpecialFolderLocation

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

Sections

CODE
Size: 166KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE