4fbdd6170de11423e98070c818906257 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fbdd6170de11423e98070c818906257
Size

182KB
MD5

4fbdd6170de11423e98070c818906257
SHA1

66cde70c1a4ddd5dbbe52e6ca3bf305fdee9b07a
SHA256

c32636f822665bc8004bb2e411936f1744de4c7d0eb36a9a24026a6915d11435
SHA512

b25f371c1269592147463af339af623199bf972df45b76b4cea3791ce18a0c9dee028816c7e6eb931e335a69bda50067d7d8d88f0126491be849fc41193e1794
SSDEEP

3072:P4C4DCiABhu6rNwQLOBFzx7xVljpOS1LjoD8NynuAFvVVtIw:aDlihuZlRPljprLkD8NyuAFvVIw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fbdd6170de11423e98070c818906257

Files

4fbdd6170de11423e98070c818906257
.exe windows:4 windows x86 arch:x86

6520e2f4c3c593f2d8d97b989c454623

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadAffinityMask
GetCommandLineA
SystemTimeToFileTime
GetWindowsDirectoryW
CreateMailslotA
CommConfigDialogW
CallNamedPipeA
SetCommMask
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

SendNotifyMessageW
GetClassInfoA
GetNextDlgGroupItem
InvalidateRect
IsCharAlphaA
BlockInput
IMPQueryIMEA
SendIMEMessageExA

shell32

SHUpdateRecycleBinIcon
SHGetIconOverlayIndexW
StrChrW
SHHelpShortcuts_RunDLLW

gdi32

UnloadNetworkFonts
EndPath
GetEUDCTimeStamp
GdiPlayJournal
CreateEllipticRgnIndirect
SetRectRgn

Sections

CODE
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE