4fe8e45f3724f91c21b09ee17f613607

Sharing

Copy URL Twitter E-mail

General

Target

4fe8e45f3724f91c21b09ee17f613607
Size

71KB
MD5

4fe8e45f3724f91c21b09ee17f613607
SHA1

14ea10fa82cf632e5917b06854606d2ef1554dc1
SHA256

6c8afbd0e12eb0b0eb3e66b8250f3156ac5685bffa780662a3de74f78b7770fe
SHA512

319a1ab338d47e62220845c0c086de7d23f766d1f1d8afd623c7f7041fcdf22a2ab75172f91ba88c52732f93adab6153dca3a811e991ab217bc95ad2b86e9c80
SSDEEP

1536:ANqTen/QJ97NoqKTKbmVDTaWKkX1HPn9RngXhCN1U0I/c6/a:A7n/QJ97NGaWvlHnn+h61tI/g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fe8e45f3724f91c21b09ee17f613607

Files

4fe8e45f3724f91c21b09ee17f613607
.exe windows:5 windows x86 arch:x86

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CheckRadioButton
CharLowerA
GetClientRect
IsMenu
GetSystemMenu
ShowWindow
ChangeMenuA
GetDlgItem
CalcMenuBar
SendDlgItemMessageA
GetMessagePos
SetWindowTextW
GetWindowLongA
GetWindowTextA
GetPropA
SetMenu
GetSysColorBrush
MoveWindow
UnhookWindowsHookEx
IsChild
IsIconic

advapi32

IsValidAcl
ReportEventW
SetSecurityDescriptorGroup
RegEnumValueA
GetTokenInformation
RegEnumKeyExA
RegDeleteValueA
RegOpenKeyW
OpenThreadToken
GetLengthSid
GetSecurityDescriptorDacl
RegDeleteKeyW
GetSidSubAuthorityCount
MakeSelfRelativeSD
InitializeAcl
RegOpenKeyA
CheckTokenMembership
GetUserNameA
SetSecurityDescriptorOwner

kernel32

VirtualAlloc
FormatMessageW
GetStdHandle
FreeLibrary
ExitProcess
LoadLibraryW
HeapFree
IsDBCSLeadByte
GetCurrentProcessId
GetCurrentThreadId
GlobalAlloc
MultiByteToWideChar
lstrcmpA

msvcrt

_ltow
__p__fmode
towupper
_wcsnicmp
_adjust_fdiv
__set_app_type
bsearch
__p__commode
__setusermatherr
wcsncpy
wcsspn
fseek
strncmp
_acmdln
_snwprintf
realloc
__CxxFrameHandler
wcsrchr

ole32

OleRegEnumVerbs
OleUninitialize
StringFromGUID2
WriteClassStm
CreateILockBytesOnHGlobal
OleInitialize
CreateStreamOnHGlobal
PropVariantCopy
OleRegGetMiscStatus
CreateBindCtx

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 15KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc33a1bb432f10f2eb2712fe3ec96724

Headers

File Characteristics

Imports

user32

advapi32

kernel32

msvcrt

ole32

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 21KB - Virtual size: 20KB

.data Size: 15KB - Virtual size: 76KB

.idata Size: 17KB - Virtual size: 17KB

.reloc Size: 1024B - Virtual size: 1004B

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 21KB - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 76KB

.idata
Size: 17KB - Virtual size: 17KB

.reloc
Size: 1024B - Virtual size: 1004B