4fa1406faa4a5700dca5c508b97e0808

Sharing

Copy URL Twitter E-mail

General

Target

4fa1406faa4a5700dca5c508b97e0808
Size

108KB
MD5

4fa1406faa4a5700dca5c508b97e0808
SHA1

afc6d02a5c7e0f58ee4b94fdb74d2f6c564832a8
SHA256

3dfb542732296ad5f7e121f6baa2461abf270e5756b687eb980b2037b531564f
SHA512

2d89cf98c6f9ab012f925926623a0e6d5b65405460a6b8a1c4a01c9ae13414d7b9fb0801f1a2f72ac84dfa64448935c5c0c2cdb353336a268b4c267e3437651f
SSDEEP

1536:ryyYGqHMm2MpUrxZJ4ge9kVJ5AuSCCQVtHFK7UjukI/1mqb5taCrxllIoL:rAGE2MS3okVwnCCQ7lKI6Zpj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa1406faa4a5700dca5c508b97e0808

Files

4fa1406faa4a5700dca5c508b97e0808
.exe windows:4 windows x86 arch:x86

cf906c31c9a477af6f5dd3c57cc62c25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgimpui-2.0-0

gimp_ui_init

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__p___argc
__p___argv
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
atexit
memcpy
signal
sin

libgimp-2.0-0

gimp_drawable_bpp
gimp_drawable_detach
gimp_drawable_get
gimp_drawable_has_alpha
gimp_image_base_type
gimp_image_get_colormap
gimp_install_procedure
gimp_main
gimp_pixel_rgn_get_rect
gimp_pixel_rgn_init
gimp_tile_cache_ntiles

libgimpbase-2.0-0

gimp_locale_directory

libgimpwidgets-2.0-0

gimp_dialog_new
gimp_help_set_help_data
gimp_standard_help_func

libgdk-win32-2.0-0

gdk_draw_gray_image
gdk_draw_rgb_image
gdk_window_get_pointer

libglib-2.0-0

g_free
g_idle_add_full
g_malloc
g_rand_free
g_rand_int_range
g_rand_new
g_source_remove
g_strdup_printf

libgobject-2.0-0

g_signal_connect_data
g_type_check_instance_cast

libgtk-win32-2.0-0

gtk_box_get_type
gtk_box_pack_start
gtk_container_add
gtk_container_get_type
gtk_container_set_border_width
gtk_dialog_add_button
gtk_dialog_get_type
gtk_drawing_area_new
gtk_frame_get_type
gtk_frame_new
gtk_frame_set_shadow_type
gtk_main
gtk_object_get_type
gtk_widget_add_events
gtk_widget_destroy
gtk_widget_get_style
gtk_widget_set_size_request
gtk_widget_show

intl

libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_gettext
libintl_textdomain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cf906c31c9a477af6f5dd3c57cc62c25

Headers

File Characteristics

Imports

libgimpui-2.0-0

kernel32

msvcrt

libgimp-2.0-0

libgimpbase-2.0-0

libgimpwidgets-2.0-0

libgdk-win32-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgtk-win32-2.0-0

intl

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 32B

.rdata Size: 1024B - Virtual size: 596B

.bss Size: - Virtual size: 2KB

.idata Size: 3KB - Virtual size: 2KB

.mdata Size: 68KB - Virtual size: 68KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 32B

.rdata
Size: 1024B - Virtual size: 596B

.bss
Size: - Virtual size: 2KB

.idata
Size: 3KB - Virtual size: 2KB

.mdata
Size: 68KB - Virtual size: 68KB