c4a002f9deb366f8f6790179b3a7f745 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4a002f9deb366f8f6790179b3a7f745
Size

301KB
MD5

c4a002f9deb366f8f6790179b3a7f745
SHA1

561d22c13ae07744f8ca789b8acec067224703f0
SHA256

948c3811bf58e29d7b178178a1b906711880698823e80513225182ce85744a9e
SHA512

e552a6884fc00de4d147837517936090a07793f6b62747852c919446c04a2d243e8564639f5e7c5823eeed0f562270e2ee437ea8f91338ac1e510411ad2a34f6
SSDEEP

6144:5JEYERqaQiEYixXAkmOgoUpMEEdlntRb5A+na4S35EQwv:X5+qntJxjfg5mxdltZ5A+na4RQwv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4a002f9deb366f8f6790179b3a7f745

Files

c4a002f9deb366f8f6790179b3a7f745
.exe windows:4 windows x86 arch:x86

92bfd8d0eccfd8944769d829f6305c80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

SaveDC

ole32

OleDraw

comctl32

ImageList_Add

wininet

InternetOpenA

wsock32

WSACleanup

Sections

.text
Size: 295KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pe
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE