4fb3e5461fee0dc898efc9d1439341f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fb3e5461fee0dc898efc9d1439341f1
Size

424KB
MD5

4fb3e5461fee0dc898efc9d1439341f1
SHA1

7129ad5ea77567357d8b4e0b4920c34168796981
SHA256

8f77ba44e9a099bb7cc70211b027adb50dcf25817582277e50c0a1e6fef3470e
SHA512

41e06318f6c6770f65b855b352375e1d6fa26655b881505efa5719a2312fac807a15a5a76cbacbea30077b9a1f4b6ffd6ec77d4b322ea5c7cb43164681309753
SSDEEP

12288:yFuYQ2bqZLFrc6fYviTHsr6V5fZnwHWNC/fUrCCGMa:ys2bSFrc6fYmO6V5fZnw2qWCLl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fb3e5461fee0dc898efc9d1439341f1

Files

4fb3e5461fee0dc898efc9d1439341f1
.exe windows:4 windows x86 arch:x86

f9d99b6ded732386874b7358b2098834

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
GetCurrentProcess
LCMapStringA
ExitProcess
LoadLibraryA
CloseHandle

user32

SetWindowLongA
CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA

advapi32

RegSetValueA
RegEnumKeyA
RegCloseKey
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegQueryValueA
RegOpenKeyA
RegDeleteKeyA

Sections

.text
Size: 406KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ