4f9703cb45652f02d312866df221dfd4

General

Target

4f9703cb45652f02d312866df221dfd4
Size

117KB
MD5

4f9703cb45652f02d312866df221dfd4
SHA1

63911d32663a14c6a4011793666de84d80184125
SHA256

4fe21894edc6a550c44c755276880ccc4f2acdf2247362c3149a5da9b8b62a35
SHA512

9255f11295ed8d18f58c126a899442de71e516f4e4e36605482238eeb75ee65261974e599efbd8738033eee08c14fd842da812646c4be4ac86d59c1db13f649b
SSDEEP

3072:2BOMd8mj03OYmtZc/7j2y9xH253g+TjL0E5uO7euz:yOzmj03O+/ZH2ppTfV6uz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9703cb45652f02d312866df221dfd4

Files

4f9703cb45652f02d312866df221dfd4
.exe windows:4 windows x86 arch:x86

d2b9a60ad4d49fb088cc07dc3f9c6c18

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetUserDefaultUILanguage
CreateProcessW
SetFilePointer
GetModuleHandleA
ReleaseMutex
GetLocalTime
VirtualAlloc
VirtualProtect
LoadLibraryA
GetLastError
ExpandEnvironmentStringsW
TryEnterCriticalSection
GetFileSize
CreateThread
CloseHandle
CreateEventW
GetSystemTimeAsFileTime
CreateFileA
HeapFree

user32

DispatchMessageA
SendMessageA
EndDialog
SetProcessWindowStation
PeekMessageA
SetThreadDesktop
GetClipboardData
GetIconInfo
GetKeyState
MsgWaitForMultipleObjects
ToUnicode
GetClassNameA
GetWindowLongA
FindWindowExA
GetDlgItemTextA
OpenDesktopA
DrawIcon

advapi32

CryptGetHashParam
RegCloseKey
CryptCreateHash
RegQueryValueExA
GetUserNameW
CryptHashData
RegSetValueExA
CryptAcquireContextW
CryptDestroyHash
RegEnumKeyExA
RegCreateKeyExA
CryptReleaseContext
DuplicateTokenEx

shlwapi

wvnsprintfW
StrStrW
StrCmpNIA
PathFileExistsW
wvnsprintfA
StrCmpNIW
PathFindFileNameW
PathRemoveFileSpecW
PathMatchSpecW
wnsprintfW
wnsprintfA
SHDeleteKeyA
PathCombineW

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 733B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2b9a60ad4d49fb088cc07dc3f9c6c18

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shlwapi

Sections

.text Size: 60KB - Virtual size: 60KB

.data Size: 1KB - Virtual size: 9KB

.rdata Size: 1024B - Virtual size: 733B

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 60KB - Virtual size: 60KB

.data
Size: 1KB - Virtual size: 9KB

.rdata
Size: 1024B - Virtual size: 733B

.rsrc
Size: 1KB - Virtual size: 1KB