4fad21bac55b86911b46cbabf55b737f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fad21bac55b86911b46cbabf55b737f
Size

55KB
MD5

4fad21bac55b86911b46cbabf55b737f
SHA1

26e013261098b3349d7dcb3a4ae8967f9bb65d01
SHA256

847a5160d8fd7a70164f57f8e392a7fe22529fa9f7e29102e9a641cc680d195d
SHA512

5671210e815127cac263ba09f4a98c66bcb9770865c62fc8c0664bb6201ca4943deb582c6ece1341c554e819ff7b3abc9bfa315f24decc4f7815570c37c55fbe
SSDEEP

1536:U3BmwS5dC+xpJjfJtFMlVJkq2U2nSVau+vm3bypnShT:yBC7C8phJt8JAU24au+u3anu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fad21bac55b86911b46cbabf55b737f

Files

4fad21bac55b86911b46cbabf55b737f
.exe windows:4 windows x86 arch:x86

2c14a135b973926595ef65d8c374f60a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetFileSize
GetModuleHandleA
GetStartupInfoA
ExitProcess
RaiseException
UnmapViewOfFile
WriteFile
lstrcmpiA
CloseHandle
GetSystemTimeAsFileTime

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 44KB

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ