4fec39c46f66fa59cb75ee43f8429db3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fec39c46f66fa59cb75ee43f8429db3
Size

21KB
MD5

4fec39c46f66fa59cb75ee43f8429db3
SHA1

571ee1e23ac917efdb185dbf2c6ebeeff65ccc2d
SHA256

1cd31800da949b0ebfec89ee43ac96b13743b8623703568a084303c872d1f2df
SHA512

51a5537cb6e9479bc557c561b825b84e02721f0b12029fea58fc0fa3f0978fba3edde15443c2ee3f3d43079a6d4e05d728f01535355d03408f6eae7d16dc240e
SSDEEP

384:Y0DwYF4Mm4IxK3/1zeapANSkfWiUJurhs7DQa6Y2drLDHGTX:Y07wxK3/1apMJurhqDQfYOrLTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fec39c46f66fa59cb75ee43f8429db3

Files

4fec39c46f66fa59cb75ee43f8429db3
.exe windows:4 windows x86 arch:x86

34bf0277a20327b5de35ffa6a5f3e754

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

memset
exit
malloc
strlen
memcpy

kernel32

GetModuleHandleA
HeapCreate
GetModuleFileNameA
HeapDestroy
ExitProcess
GetCurrentThreadId
GetCurrentProcessId
CloseHandle
HeapFree
GetVersionExA
WriteFile
CreateFileA
HeapAlloc
GetFileSize
SetFilePointer
ReadFile
HeapReAlloc
MultiByteToWideChar

user32

MessageBoxA
GetWindowThreadProcessId
IsWindowVisible
IsWindowEnabled
GetForegroundWindow
EnableWindow
EnumWindows

comctl32

InitCommonControls

oleaut32

SysAllocString

ole32

CoInitialize
CoCreateInstance
CoUninitialize

Sections

.code
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.flat
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE