c4ac84e7d8e7353e3735dddfda8c2bc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ac84e7d8e7353e3735dddfda8c2bc9
Size

258KB
MD5

c4ac84e7d8e7353e3735dddfda8c2bc9
SHA1

18a3b689063b6fa5cc1f19cb13cc41a3771e1262
SHA256

424534cd4ac908a6cc574e87c1ddc856f8983d127965bd29a74dcd9179fa4eec
SHA512

eaacba9947006da565f916b072b36d3b7783fe834bb7a2f4f86cf56d039ca559a419ba1c00491d802829b9918776a79196965ed83c532ae47ec2940bc8e90196
SSDEEP

6144:VUzBTgiY3cZdlsNI2fSeiUW4kG4rKKPuyvgFDfebvJK:qzJgVcfls1fgW4rKKPulDfeDJK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ac84e7d8e7353e3735dddfda8c2bc9

Files

c4ac84e7d8e7353e3735dddfda8c2bc9
.exe windows:4 windows x86 arch:x86

918ac987d9c9e6a37718b786e80cf532

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
MultiByteToWideChar
lstrcmp
GetModuleFileNameA
CreateFileA
ReadFile
VirtualAlloc
lstrlen
VirtualFree
GetPrivateProfileStringA
CloseHandle
GetProcAddress
lstrcat
ExitProcess
LoadLibraryA
GlobalAlloc
lstrcpy

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 245KB - Virtual size: 924KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ