4f82ca4d7e12c6c4a1bed90cde87db99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f82ca4d7e12c6c4a1bed90cde87db99
Size

56KB
MD5

4f82ca4d7e12c6c4a1bed90cde87db99
SHA1

844c38f4f28eafb7591c4a9faaf6151a647a2420
SHA256

45d7eae6d0e4fd595790a8076481ace502692417b17a6b82e5db41b987ab9f43
SHA512

806483d7af2e1f05c0f21266f89545802a29cf1f6fa8d3e53745ae63ac43a2b770b591e514322663c0ace314e747e2cfb14be82a9fca1be7b7f24d87bb3e5738
SSDEEP

768:Ip6L57q8uFf1dN6r91p6L57q8usGf1dN6rt:WUGb9UUGOG9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f82ca4d7e12c6c4a1bed90cde87db99

Files

4f82ca4d7e12c6c4a1bed90cde87db99
.exe windows:4 windows x86 arch:x86

2cb3806c22e8dd434291c326e768ffc4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
CreateFileA
CloseHandle
IsBadStringPtrW
TlsGetValue
LocalFree
FindResourceA
SetLastError
LoadLibraryW
GlobalUnlock
GetModuleHandleA
lstrlen
PulseEvent
GetEnvironmentVariableA
ReleaseMutex
FindClose
Sleep
HeapCreate
GetACP
CreateMutexA

user32

CopyRect
CallWindowProcA
IsWindow
DrawEdge
CheckRadioButton
DefWindowProcW
DispatchMessageA
SetFocus
FillRect
GetDlgItem
GetDC
GetIconInfo
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BEREncBool
ASN1BERDecBool
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE