4fa9f1afb2efd1ebba79d84b01c8a047 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fa9f1afb2efd1ebba79d84b01c8a047
Size

54KB
MD5

4fa9f1afb2efd1ebba79d84b01c8a047
SHA1

654726843d1d32d6e91bd9ca777124a4e6dd6406
SHA256

ccbf3385535e98915cf106d5a0c667d1d7c4fe8db293ea97291fc56a17e18c90
SHA512

cb41ca536ed12363b320ff0be4b95a9e6c0ced7d9252b0683e3057d5c2d5d0a9e5d9687d95cbb401007837871846841c67eeecd2d593f934081613d7edf22d28
SSDEEP

1536:eQcixw9AzJ4mSYDNoqDtVrCOjZzjqdjCi:ecxw6J/PZ/VLMEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa9f1afb2efd1ebba79d84b01c8a047

Files

4fa9f1afb2efd1ebba79d84b01c8a047
.exe windows:5 windows x86 arch:x86

3f9b03117c71b5cb2603e3d8993ff745

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteValueA

kernel32

lstrcatW

shlwapi

PathCombineW
PathFindFileNameW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
DispatchMessageA
GetCursorPos
GetIconInfo
GetKeyboardState
GetKeyState
GetWindowLongA
LoadCursorA
MsgWaitForMultipleObjects
OpenDesktopA
PeekMessageA

Sections

.juz
Size: 44KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pidgt
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fej
Size: 6KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ