4f1a453a3e3a8ba936543278d77048d4

Sharing

Copy URL Twitter E-mail

General

Target

4f1a453a3e3a8ba936543278d77048d4
Size

402KB
MD5

4f1a453a3e3a8ba936543278d77048d4
SHA1

fbd07d600e1f9675ec2dde6bc0dc3323f5600979
SHA256

dde77d63d94e4a765bee3cfab26187e5276c51e6021a81d70a1f20d9371c58e8
SHA512

d53d34a91e328b5f702fe6af4612d212c06ee3c3f025e463eaa09c9c42a691b17f2c8bf153a36543831699c5db29f1711d643d89047b4b9ade4ada6773bf096e
SSDEEP

12288:hngs9BMHMjrJDsFf23mtgerTls9tCxs0bozVk:1fMHMPb3ml6tZ0bozVk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f1a453a3e3a8ba936543278d77048d4

Files

4f1a453a3e3a8ba936543278d77048d4
.exe windows:4 windows x86 arch:x86

e6f9e27b982c67104bbfdf0ee07c37e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
TlsGetValue
SetConsoleCtrlHandler
GetStringTypeExW
LeaveCriticalSection
SystemTimeToTzSpecificLocalTime
HeapAlloc
LoadLibraryA
FreeEnvironmentStringsA
GetVersion
MapViewOfFile
GetConsoleCursorInfo
LoadLibraryExW
GetEnvironmentStringsW
InterlockedExchange
GetTickCount
GetCurrentThread
SetLastError
TlsAlloc
SetStdHandle
GetStdHandle
GetStartupInfoA
TlsFree
GetStartupInfoW
ExitThread
VirtualFree
InitializeCriticalSection
SetHandleCount
GetProcAddress
DeleteCriticalSection
MultiByteToWideChar
HeapFree
GetPrivateProfileStringW
GetModuleFileNameW
FreeEnvironmentStringsW
WriteFile
VirtualQuery
GetCommandLineA
HeapDestroy
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetCurrentProcessId
EnterCriticalSection
IsBadWritePtr
HeapReAlloc
UnhandledExceptionFilter
ExitProcess
FileTimeToSystemTime
lstrcmpW
VirtualAlloc
TerminateProcess
QueryPerformanceCounter
GetCurrentProcess
GetFileType
GetModuleHandleA
HeapCreate
GetModuleFileNameA
FlushConsoleInputBuffer
GetCurrentThreadId
RtlUnwind
TlsSetValue
GetLastError

wininet

InternetConnectA
FtpPutFileEx
InternetSetOptionA
InternetGoOnlineA
InternetUnlockRequestFile
FtpCommandW
InternetReadFileExW

gdi32

PolyBezier
EnumEnhMetaFile
SetICMProfileW
GetCharABCWidthsW
GetLogColorSpaceW
GetClipRgn
TextOutW
SetWorldTransform
CopyEnhMetaFileW

user32

GetUserObjectInformationW
GetAncestor
GetMenuContextHelpId
GetDlgCtrlID
SetMenuItemInfoW
GetMenuStringA
OemToCharBuffW
DestroyIcon
SetWindowsHookExA
TranslateMDISysAccel
FindWindowW
CharUpperA
ChangeDisplaySettingsExA
OpenInputDesktop
EnumChildWindows
GetWindowLongW
SetDlgItemTextW
TrackPopupMenu

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 266KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6f9e27b982c67104bbfdf0ee07c37e9

Headers

File Characteristics

Imports

kernel32

wininet

gdi32

user32

Sections

.text Size: 124KB - Virtual size: 123KB

.data Size: 266KB - Virtual size: 278KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 124KB - Virtual size: 123KB

.data
Size: 266KB - Virtual size: 278KB

.rsrc
Size: 11KB - Virtual size: 10KB