4f64f1317a4d93258d12b9a66e46e637 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f64f1317a4d93258d12b9a66e46e637
Size

770KB
MD5

4f64f1317a4d93258d12b9a66e46e637
SHA1

eab9a787b8eb309ea458b373a8808019f308cd1b
SHA256

6cc198901fa7aa94cf1944356dc88f45021107f2998401fb06c2e0e7d6b64802
SHA512

e672bc0cecd6fd6ad4610cae0213b1e341ca7f5f997f0d350ecb45187230261005450cf6911025e94ce14bdefb467bad8166c11757cff03267347826901e5b11
SSDEEP

12288:3RgjSP5pQs5BaoPCCjVeuIfg66zhKRAE2LbV8F/83rzJ5uJccTwSar/N:kuvQsfao6CnII6mhURF/6DmccEtbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f64f1317a4d93258d12b9a66e46e637

Files

4f64f1317a4d93258d12b9a66e46e637
.exe windows:4 windows x86 arch:x86

8e78934d515a5f94667dc3c2a323de12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SetEvent
HeapCreate
DeleteFileA
SuspendThread
Sleep
CreateEventA
GetModuleHandleA
GetModuleFileNameW
SetFilePointer
SetConsoleCP
CloseHandle
GlobalFlags
GetTimeFormatA
OpenMutexA
ReleaseMutex
lstrlenW
GetCommandLineA
CloseHandle
GetTickCount

user32

FillRect
DrawTextW
DispatchMessageA
GetWindowLongW
SetFocus
PeekMessageA
DestroyWindow
BeginPaint
GetParent
CallWindowProcW
IsWindowVisible
LoadImageW
DispatchMessageA

mdminst

ClassInstall32
ClassInstall32
ClassInstall32
ClassInstall32

wininet

FtpCommandW

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 763KB - Virtual size: 763KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ