4fa33e3f00d94b2e9b13b33656a82590 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fa33e3f00d94b2e9b13b33656a82590
Size

22KB
MD5

4fa33e3f00d94b2e9b13b33656a82590
SHA1

da1e74bd3c9e33a874f9bf723ecb8d662ae942e3
SHA256

144235b8ba87909c8a9447d9434a7190fed7c068fe281513e616e06021a4f9d0
SHA512

fd109f3250c09fd8869e3c14266378abb9934fcbcd02a6f52aac9a28096800d8c3b2d9538c3fef1c3443d5b8011a8a74057658aac178d04ed0a0cd1e8dc860e4
SSDEEP

384:e440VBdrD3fs5r7tRmLxHf1yiluv7hX3HrL4T2CR7fiCcezrd:dBxUrpRmLl9y2uDhnHITR7fTLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa33e3f00d94b2e9b13b33656a82590

Files

4fa33e3f00d94b2e9b13b33656a82590
.exe windows:4 windows x86 arch:x86

6c772d26c74752b56dfd0cafb7706a4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHAddToRecentDocs
StrRChrIA
StrStrIA

wsock32

WSACleanup
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

gdi32

SaveDC
TextOutW
SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SetDIBColorTable

Sections

.text
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ