4f370db9f5c3ce1744cd490bd0ded187c80c0d45a962e2bcc8f1a0736cea0096 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f370db9f5c3ce1744cd490bd0ded187c80c0d45a962e2bcc8f1a0736cea0096
Size

142KB
MD5

b0b1ade54fa3da74dcd30b47fa87ea55
SHA1

15da9b36e025727ebdb7d703fc9da0020ea5b349
SHA256

4f370db9f5c3ce1744cd490bd0ded187c80c0d45a962e2bcc8f1a0736cea0096
SHA512

7172a4ca5ad1a605d9413c31392768c36aafa8f0dd3b7a9de691de7b53152da265102f04d5b528af5e73266a6d251ee52422618880fb2a1260a2ea12a5a27f26
SSDEEP

3072:JttcarQt7TMOgrcxweQToVFV6qelNJEGJs4xnHIBOpsF0D0zSE9NYRpZwVjdG5uN:JttQ3ghoVFV6qelNJ/sioBFYkSNZwVj5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f370db9f5c3ce1744cd490bd0ded187c80c0d45a962e2bcc8f1a0736cea0096

Files

4f370db9f5c3ce1744cd490bd0ded187c80c0d45a962e2bcc8f1a0736cea0096
.exe windows:1 windows x86 arch:x86

9357a2352a55bbeefe018168aeda90b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetModuleHandleA
GetProcAddress
CloseHandle
GetTempFileNameA
RtlUnwind
WriteFile
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
GetLastError
lstrlenA
CreateFileA
GetVersionExA

shlwapi

PathGetDriveNumberA

crtdll

__GetMainArgs
exit
raise
signal

shell32

SHGetMalloc

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

gdi32

CreateFontIndirectA

user32

SetWindowLongA
LoadStringA
SendMessageA
GetWindowLongA
MessageBoxA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 316B - Virtual size: 316B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ