4a0ef752da111f93be93f6bf60e0ac2e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a0ef752da111f93be93f6bf60e0ac2e
Size

170KB
MD5

4a0ef752da111f93be93f6bf60e0ac2e
SHA1

3091d7b9e1cf0926f32ad34a4e5b1040e9ef023a
SHA256

e304515487f05d35e5a22aa49997b47141e884fda37072b9c7df0fd8feac2a35
SHA512

41323524625996a4ced644bf05925b845f9aa3b6a70afd9a931e9224c2d7d555d5a29c5ec912daa7508e2c64b12641c8961e3228b697daee75af125248afa0b6
SSDEEP

3072:dwUtuJp5sgLMnwEK/wZX+xNIidFh8VaSM3eF4MitAdJ3+pJ15d:dwUtuD5FYnwEftCNIidr+k3qquJSPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0ef752da111f93be93f6bf60e0ac2e

Files

4a0ef752da111f93be93f6bf60e0ac2e
.exe windows:1 windows x86 arch:x86

c7ba464847fe80374431db188890c850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind
GetModuleHandleW

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

ulib

??0PATH@@QAE@XZ
??0DSTRING@@QAE@XZ
??0STRING_ARGUMENT@@QAE@XZ

ntdll

RtlFreeHeap

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE