4f94226da597cde736beff6029596f8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f94226da597cde736beff6029596f8a
Size

143KB
MD5

4f94226da597cde736beff6029596f8a
SHA1

90d7c96cdbfc1dffef92b032ca0d6a97541636c8
SHA256

931fec1b07a16b114f6c9bae2f2a84f459064a57b39705049365abb14baa0b96
SHA512

6b28af92f4a66c8b5ed8c7605ff299cbeb5622b6efb03f272d03f69612f8760f1a326eb4fd388430bfd425336a6082cd0367ac4b9ca1544fd31a926c0856b5e1
SSDEEP

3072:rHsIG4QjjGu8rkOpfLY0JFdwKLl4vjQy/0D8SS1He7Q4hj:rHs34QjjpC3JFPejQy/tHe/hj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f94226da597cde736beff6029596f8a

Files

4f94226da597cde736beff6029596f8a
.exe windows:4 windows x86 arch:x86

b6ab096e95dcc3996853d5320b7c6032

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

HlinkNavigateString

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE