4fe94825705d82b96e01edde3c897365

General

Target

4fe94825705d82b96e01edde3c897365
Size

183KB
MD5

4fe94825705d82b96e01edde3c897365
SHA1

dff69eaac82cf631e879e7c2abf49081a6df36c1
SHA256

fa3856dc9a6d663ed15d5150e212403c5eb37dabc859bf5f18da4e9e49474956
SHA512

dfc38f2152315a33602628b7553e3bb71c9a8cb892ce5e7e49d3f5d5a5ab60824e925bbad957bb9ac5543d14ee7018c7da02198210f0c0b48795789358140c05
SSDEEP

3072:a6FcFGMfGJtLGSsp8+MoYVyg+AP4ZUsfpqv7+tUgKLt+uooJgF4nwXndsV:FPCc1VR4fUvd5tNooqFFXWV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fe94825705d82b96e01edde3c897365

Files

4fe94825705d82b96e01edde3c897365
.exe windows:4 windows x86 arch:x86

ae3900eb074edc26f64af1d1a23f12f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
EnumResourceTypesA
SetUnhandledExceptionFilter
CancelTimerQueueTimer
GetBinaryType
GetConsoleInputWaitHandle
UnregisterWait
FindNextFileW
ReadConsoleInputExA
SetConsoleTitleA
ChangeTimerQueueTimer
WriteConsoleOutputCharacterA
LoadLibraryExA
QueryPerformanceFrequency
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

LoadCursorFromFileW
CloseClipboard
AnimateWindow
MapVirtualKeyExW
GetTopWindow
DrawAnimatedRects
GetCapture
SetClipboardViewer
MessageBoxExW
LockWorkStation
IsCharLowerW
GetScrollBarInfo
RegisterWindowMessageW
ScrollChildren
MonitorFromWindow
UpdatePerUserSystemParameters
GetSubMenu
EnumDisplayDevicesA

shell32

DuplicateIcon
SHHelpShortcuts_RunDLLA
ShellExec_RunDLL
ExtractIconExA
DragFinish
StrCmpNIW
StrStrIW
SHInvokePrinterCommandA

gdi32

GetViewportExtEx
GdiAlphaBlend
DeleteColorSpace
FONTOBJ_pxoGetXform
GetCharABCWidthsI
SetMapperFlags
QueryFontAssocStatus
EngAssociateSurface
cGetTTFFromFOT
RemoveFontMemResourceEx
CreateFontA
EngLineTo
GetEUDCTimeStampExW
StartFormPage

Sections

CODE
Size: 5KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ae3900eb074edc26f64af1d1a23f12f3

Headers

File Characteristics

Imports

kernel32

user32

shell32

gdi32

Sections

CODE Size: 5KB - Virtual size: 808KB

.data Size: 172KB - Virtual size: 173KB

.rsrc Size: 1KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 3KB

CODE
Size: 5KB - Virtual size: 808KB

.data
Size: 172KB - Virtual size: 173KB

.rsrc
Size: 1KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 3KB