4901f2d05744ab947d49ddcb90d10bd8638e883128a1fcb31fdd185a02c94125 | Triage

Sharing

General

Target

4901f2d05744ab947d49ddcb90d10bd8638e883128a1fcb31fdd185a02c94125
Size

78KB
MD5

ee19581a9b4a29a2d9f53329e5824938
SHA1

d4a66dd552df15c0cd8f200f6fd5b8a2f2e1e8bb
SHA256

4901f2d05744ab947d49ddcb90d10bd8638e883128a1fcb31fdd185a02c94125
SHA512

8bb12261ef5bbb77d37e8b203cb8e2511c5d56ba0ece7cb7627f30466f451d2c3c81692b6c393c653a3e31dcd49fe0f0744d6f319035c377be6a11e80e670cb8
SSDEEP

768:JWDnMge+QDKVZhPsED3VK2+ZtyOjgO4r9vFAg2rqVcBf55vVWL9CUk+/wcWVPnV:w/e+mKFYTjipvF26cZ0L4P+4V9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4901f2d05744ab947d49ddcb90d10bd8638e883128a1fcb31fdd185a02c94125

Files

4901f2d05744ab947d49ddcb90d10bd8638e883128a1fcb31fdd185a02c94125
.exe windows:5 windows x86 arch:x86

28e46cf78fd543ccdc5071ec4c6c58bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

gdi32

GetWindowOrgEx
SetWindowOrgEx
CreateDCA

kernel32

ExitProcess
GetModuleHandleW
GetConsoleCP
SetConsoleMode
GetProcAddress

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ