4ef2f0b2f1ab320b681f04be91ce516c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ef2f0b2f1ab320b681f04be91ce516c
Size

920KB
MD5

4ef2f0b2f1ab320b681f04be91ce516c
SHA1

82e617083cecff880ec12956f2990198718cf033
SHA256

01194897b651191b468a319fdec09e120766a456817a53d920b25c16305950fc
SHA512

2f89cdeafce8f5c0ecf0e3c8a44376eb1bccf0d8a28a2e5c4b7a6b328357892e82f586284373706aa935ba452f5b7086f2e69cb3f7281d337b9de3293cf7cd0c
SSDEEP

24576:QdKl5cr8wGnc9+thDvGNh4qI9aqn9xGzfUxaExhR4tbo:Qc0Gyy+r4DAq98zfvENmo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ef2f0b2f1ab320b681f04be91ce516c

Files

4ef2f0b2f1ab320b681f04be91ce516c
.exe windows:4 windows x86 arch:x86

8f2d085ca6aff7a98ebad75b4b87e8f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapDestroy
HeapAlloc
LCMapStringA
HeapCreate
ExitProcess

user32

SetWindowLongA
CreateWindowExA
CloseWindow
wsprintfA

advapi32

RegEnumValueA
RegQueryValueA
RegCloseKey
RegCreateKeyA

ole32

CoUninitialize
CoCreateInstance
CoGetClassObject

Sections

.text
Size: 106KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 714KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 67KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE