c4ab21a13c2e9923d1108b92cd483cfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ab21a13c2e9923d1108b92cd483cfb
Size

35KB
MD5

c4ab21a13c2e9923d1108b92cd483cfb
SHA1

d06588e99f9bc8aec21e27e66ea241951a93034b
SHA256

78174a5764169e2a7fbc85a3db1f9e2a08c7a9bc0d17ea3e8bc1942393a80c15
SHA512

5f085e122403ea8419ca1ba6f379b35222bfaaab0010eb5bf2816656e8057d9dadc370f3b9d68e7899cc420015343e0d0ca4d8f1d4b8ab9642991ad0276e275c
SSDEEP

768:k0F66HaWPQOQ1SfH9qKpb/N48rbiaOhr2aBBe/7:k0FNHT/QgH9ZFy8rWaOhrRBB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ab21a13c2e9923d1108b92cd483cfb

Files

c4ab21a13c2e9923d1108b92cd483cfb
.exe windows:4 windows x86 arch:x86

d5531fc65acf4c92066107223472d32d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

htons

urlmon

URLDownloadToFileA

user32

DialogBoxParamA

gdi32

GetDeviceCaps

advapi32

RegCloseKey

shell32

SHGetSpecialFolderPathA

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 25KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE