4fd0f9d0c09995cc4e5090cf6ae7c9b3

General

Target

4fd0f9d0c09995cc4e5090cf6ae7c9b3
Size

333KB
MD5

4fd0f9d0c09995cc4e5090cf6ae7c9b3
SHA1

02d3c0e46b84139da807f9fbe9dc055aeae55c51
SHA256

8f8efa495da71004e53d43baff0beed4f1f3e3d6d34e70719dfe098e86ebadf0
SHA512

7097b2a6589f87478363e82e26afd63f31255e37479837a2cc3b587a4a9ba125277e6e3dc6576f10ec860046cdc47b2dadbb4382efd0cbcda1e525576ec8df8c
SSDEEP

6144:Bi87/9wHQi7EmfYIoPOgJq8cdHuRnxRLC4XWuz3zgvpmK/ESMinopGGa:rRs7zgIGOgM8cynxVzMhr/ESMikGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fd0f9d0c09995cc4e5090cf6ae7c9b3

Files

4fd0f9d0c09995cc4e5090cf6ae7c9b3
.exe windows:4 windows x86 arch:x86

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineA
ResetEvent
CloseHandle
GetStringTypeA
SetEvent
ReleaseMutex
FindClose
FindFirstFileW
Sleep
GetFileAttributesExW
CreateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
ResumeThread
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
SetThreadPriority
CreateFileW
GetPrivateProfileStringW
GetFileAttributesW
GetModuleFileNameW
SuspendThread
WaitForMultipleObjects
CreateEventW
FindNextFileW
OutputDebugStringW
DeleteFileW
CreateDirectoryW
TerminateProcess
MultiByteToWideChar
FileTimeToSystemTime
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
DeleteFileA
GetFileAttributesA
GetTempPathA
GetTempPathW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
LockFileEx
UnlockFile

oleaut32

DispGetIDsOfNames
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 209KB - Virtual size: 265KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

01f1dfc42117b2d1625d5f433e4f6ecc

Headers

File Characteristics

Imports

gdi32

kernel32

oleaut32

shell32

msimg32

Sections

.text Size: 209KB - Virtual size: 265KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 120KB - Virtual size: 120KB

.text
Size: 209KB - Virtual size: 265KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 120KB - Virtual size: 120KB