4ffef6e36d41b862fec030b177fd8fbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ffef6e36d41b862fec030b177fd8fbd
Size

96KB
MD5

4ffef6e36d41b862fec030b177fd8fbd
SHA1

5330ada4f4ae8c44868d7ea9da777d7abed87f04
SHA256

5794ae5fb13960ad660877246070f77b81128b44b478a808d4e473ab22836ec5
SHA512

8b049e8c57a1ac68ea3583349b5a2ba280f8e3ffe04243f38abc6565644c7988425c611631a320285dfba858356087eddbf81c3995b586dd2fe0a03c44607ca9
SSDEEP

1536:1Qe3uhNyizBs0XE1UbzZWELGAEUSzBMdxzWZA5fX4IrQhDeAkWtfWwmb/wIhRbGa:m6Ri9C1UXY5UWMdxvfX4I0m7p66a1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ffef6e36d41b862fec030b177fd8fbd

Files

4ffef6e36d41b862fec030b177fd8fbd
.dll windows:4 windows x86 arch:x86

9e7cea0b670ce05121f4e33dfb1883d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DrawTextA

advapi32

RegQueryValueA

Exports

Exports

bkt
lbmiohjrvbt
mllwazcsdy
zwle

Sections

.text
Size: 87KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE