4eecd7dbcfebdf1d577300981998c099 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eecd7dbcfebdf1d577300981998c099
Size

145KB
MD5

4eecd7dbcfebdf1d577300981998c099
SHA1

e7aad3399ac9920213df2e5e135191fd99220597
SHA256

5cd9f326f42f58e4fc9b1a0c4d6d0e05ac53b2d405b836fb3619ef88e3d4900a
SHA512

bbb6d6301b31f5461faf7e1b35befc95db8fded65a6ce2c6669778fc45db6e3de481fff962e32a5aaaa09e7efe960b95173fbe2bc3bf3b1ea78eb390bed513dc
SSDEEP

3072:4Dbag0t1J/AlV5d4WyDCjI+uS3OO8b0tOZnoULw+qyU7TM4XPPcya6Ci:4XZ0NAcWyD9c3F8b0tOZn3Lqy+QEC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eecd7dbcfebdf1d577300981998c099

Files

4eecd7dbcfebdf1d577300981998c099
.exe windows:4 windows x86 arch:x86

72562c21745830d31343814dda230283

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

wininet

FtpPutFileA

user32

GetKeyNameTextA

gdi32

CreateDCA

advapi32

RegSetValueExA

ole32

OleRun

oleaut32

SysStringByteLen

Sections

.text
Size: 138KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE