4ff76de0d7d44571b8b158701fdab852 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff76de0d7d44571b8b158701fdab852
Size

46KB
MD5

4ff76de0d7d44571b8b158701fdab852
SHA1

40bd70d28dcadf5339ebd7a5fbbc10722a6f1b33
SHA256

47bc647bb5f0b92ba05e707efe7ab82fd98342d4398b4790c3a264a1171032bc
SHA512

5eb74967badb6b44710bece60933a06dd4964f57e57e5aa3b5bdd0f2531593b9962bf9c1dd8900ecc8e8d57a3eac3e7f1c74d56a9f574c2525322b69fbd48b92
SSDEEP

768:seDH+Wn5YYgrDeGlGZNlxgMWsE32iBCcSAdGBej99d9rKya91wtPaBl+2C:seDH3grSfflW5n2iUcmeR7lKyaYABl+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff76de0d7d44571b8b158701fdab852

Files

4ff76de0d7d44571b8b158701fdab852
.exe windows:5 windows x86 arch:x86

021df691813c6bb69aa34639bc913e4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
CryptGetHashParam
RegQueryValueExA
CryptReleaseContext
CryptCreateHash
RegDeleteValueA
DuplicateTokenEx

shlwapi

StrStrW
wnsprintfW
PathMatchSpecW
wnsprintfA
StrCmpNIW
SHDeleteKeyA
StrCmpNIA
PathFindFileNameW
PathCombineW
PathRemoveFileSpecW
PathFileExistsW
wvnsprintfW
wvnsprintfA

Sections

.tofgt
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tgp
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zav
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ