c4989a17c251575dcabcc23d3c9f718c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4989a17c251575dcabcc23d3c9f718c
Size

109KB
MD5

c4989a17c251575dcabcc23d3c9f718c
SHA1

daeccab2fa97924ac9d66729704cdf1615b6ad0f
SHA256

51a535559cbf133712a23b41efee24fd6f9b109b8a9c9c47afbe7dbd68ad4c8b
SHA512

3afea2d2c5ca02c408a5c62b5b71e8c119235536fc26f13999703dc6e885b52ae0fbb474b8bcb9f0f83e5a1cd0bb0db60c2f2bc331deccb626faf50dc7e53268
SSDEEP

3072:sLNJPxRaeZVqog3S+TgUGHtESs2+DHxlrBEld5e5Sj/qfF9jLk9k:w7TLQSsg5HWZXZ50/gZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4989a17c251575dcabcc23d3c9f718c

Files

c4989a17c251575dcabcc23d3c9f718c
.exe windows:4 windows x86 arch:x86

8ea93b8538db441eb44838660f59e5fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
FlatSB_SetScrollPos
ImageList_Add
ImageList_Merge
GetEffectiveClientRect

kernel32

CreateProcessW
EnumDateFormatsExW
FindNextChangeNotification
FreeVirtualBuffer
GetCPInfo
GetConsoleFontSize
GetDriveTypeW

Sections

.text
Size: 72KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE