b4f9acff24f2793e6ef10a36de4f8f25 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f9acff24f2793e6ef10a36de4f8f25
Size

25KB
MD5

b4f9acff24f2793e6ef10a36de4f8f25
SHA1

45649daafcdb3f5f21723524ac50b19b0aca5795
SHA256

957b7d80c17bd1992665961b4aba9807b7521fd11e12b0db94bd6bcfe3e1492e
SHA512

796eb73f3dbbd7534556053952b3393994fe3e0a5f9231fc00af7a31c351e5355fea3672732f46eb392cdb5cda4a0a2d35413c4f4ee54e101bac7f408ee96960
SSDEEP

768:wddFZixI4nXVvYn601Ztflj7ZfB7XfKOQGm6:qZonXBhCljFfBzKOQU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f9acff24f2793e6ef10a36de4f8f25

Files

b4f9acff24f2793e6ef10a36de4f8f25
.exe windows:4 windows x86 arch:x86

9534fcd0f693009c88102eb0630b67fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

CODE
Size: 18KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE