4ee8ab1dc66ece24275017215ab091be

General

Target

4ee8ab1dc66ece24275017215ab091be
Size

69KB
MD5

4ee8ab1dc66ece24275017215ab091be
SHA1

74d1b23294e559cf307693a9715a724462b5b112
SHA256

5baead26b024be21ae819da8bb08a033e17f6c8e3c694c831a03eb8d2ec77f89
SHA512

d400e54986fe6eb9ee0fdc4c9298ac1b15c57080b5cef5e85d90ffc0410db6c4ae71ea01ed979e11fa62f87b42ecc239698623b7d4f89ff5e8440eab43f9b224
SSDEEP

1536:j6aN78Vge72sVcUODynsXomJqvbkX2o46Pk:j6aNIS0OBYfo46s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ee8ab1dc66ece24275017215ab091be

Files

4ee8ab1dc66ece24275017215ab091be
.exe windows:4 windows x86 arch:x86

5f4a6ccc0f41916582fd0950d61272c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlGetCompressionWorkSpaceSize
RtlCompressBuffer
RtlDecompressBuffer

kernel32

GetLastError
GetTickCount
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
WriteFile
lstrcpyA
lstrcatA
CreateFileMappingA
GetModuleHandleA
FindResourceA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
GetTempPathA
CreateFileA
DeleteFileA
CopyFileA
LockResource
GetProcAddress
VirtualAlloc
VirtualFree
GetCurrentProcess
ExitProcess
LoadResource
SizeofResource
GetFileSize
CloseHandle
MapViewOfFile
UnmapViewOfFile

user32

MessageBoxA
MessageBoxA

shell32

FindExecutableA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f4a6ccc0f41916582fd0950d61272c3

Headers

File Characteristics

Imports

ntdll

kernel32

user32

shell32

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 260KB

.idata Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.rsrc Size: 43KB - Virtual size: 43KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 260KB

.idata
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 43KB - Virtual size: 43KB