d4a7d0aa7bef67ea5bbb1312c8304483 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4a7d0aa7bef67ea5bbb1312c8304483
Size

16KB
MD5

d4a7d0aa7bef67ea5bbb1312c8304483
SHA1

6851d138d028077e65a2266d036f7c8770a9c409
SHA256

af603d42bcb039773082f8df1654eaf12f51681bbfb9c6dd1369acd52d8e845a
SHA512

4c1391856ba0e6c3bda657d9b5cabded28fcbebef92a71609a4f382cddbd61c1cc51c1ba61ab4890f3a09793ab1b4878e859fa4b7245c445759577a1e3317cf8
SSDEEP

192:0BoiCLbRoiXvQOw/NHE/LVUuRMhkf3wHZfrpxDGTUxUOilPAN0DgHh:LiaoiRqB+VUuRMhkvwH9HG4xA2s8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4a7d0aa7bef67ea5bbb1312c8304483

Files

d4a7d0aa7bef67ea5bbb1312c8304483
.exe windows:4 windows x86 arch:x86

8a5531bfd6aa1b413e96ea032b4744f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GlobalDeleteAtom
InitAtomTable
HeapCreate
GlobalAddAtomA
GetStdHandle
MultiByteToWideChar
VirtualProtect
SetConsoleCP
GetACP
GetTimeFormatA
GetPriorityClass
GlobalFree
CloseHandle
RaiseException
SizeofResource
SetErrorMode
GlobalUnlock
LoadLibraryExA
LockResource
EnterCriticalSection

user32

GetParent
GetForegroundWindow
AnyPopup
GetActiveWindow
ShowWindow
ReleaseDC
GetFocus
GetWindowTextLengthA
IsIconic
BeginPaint
DrawEdge
EndPaint
GetWindowTextA
GetClassNameA
GetClassInfoExA
CloseWindow
GetWindow
ValidateRect
GetDC

mprapi

MprAdminUserGetInfo
MprAdminUserRead
MprAdminUserOpen
MprAdminUserWrite
MprAdminUserClose

mapi32

MAPILogonEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ