4f335c0a75e14ea9256ec40042d22942 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f335c0a75e14ea9256ec40042d22942
Size

226KB
MD5

4f335c0a75e14ea9256ec40042d22942
SHA1

7604d94623a017209fc847500f7aa297f55e0d72
SHA256

f013b8a2cad36b82d7ad4a0061b9b33a3962c1cfaea4e400aa43ffdcc852bbb9
SHA512

f97725121030077cf7b8386ab1a3f079185c307aa621c768dabcdd60ee9f4bcb017f42cae7958bcebadc73d3ee7a80301d766a223d6e6ba9c4d901d9a440d3b2
SSDEEP

6144:+UiCQXFMo/RaTLAlEbGOrJ2L+j1u8nRizEaFs:XnssrkLguUaF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f335c0a75e14ea9256ec40042d22942

Files

4f335c0a75e14ea9256ec40042d22942
.exe windows:4 windows x86 arch:x86

35302195f753b1e30e90761078b3295e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalReAlloc
GetTempPathA
CloseHandle
WriteFile
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
lstrlenA
ExitProcess
FreeLibrary
CreateDirectoryA
GlobalAlloc
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
lstrcmpA
GetCommandLineA
AreFileApisANSI
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
ReadFile
SetFilePointer
GetFileSize
FormatMessageA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
FindClose

user32

wsprintfA
MessageBoxA
CharLowerA

shell32

ShellExecuteExA

advapi32

RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ