4fffddb61e3b3b21c8b20e881587630a

Sharing

Copy URL Twitter E-mail

General

Target

4fffddb61e3b3b21c8b20e881587630a
Size

5.5MB
MD5

4fffddb61e3b3b21c8b20e881587630a
SHA1

133f659f20349b3c4288631b1e7b35102f4685e7
SHA256

4513c840bf4da171cb70e400ef4d4306021468cc4812e0e75e3639b2a76ac6ae
SHA512

4fa26f7115f7eb777c403ac97e11a0f25732f35029f2e0cef76b4eb02b2e34694f07996a2b6d84a0fa1309d4d9441ab4760b0869574315f52362c3f155e6779b
SSDEEP

98304:te0kTj5hfEKsu8zz5RQ2zeCtbNKGtYU2+7LC5jpIsOsO9XLWiyyE:0j54z5WO/t/2+7IF6ByyE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fffddb61e3b3b21c8b20e881587630a

Files

4fffddb61e3b3b21c8b20e881587630a
.exe windows:5 windows x86 arch:x86

0901266657d602fff9c7d9a865574642

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

CharUpperBuffW

Sections

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NewSec
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.B^S
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ze5
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g4c
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0901266657d602fff9c7d9a865574642

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.bss Size: - Virtual size: 48KB

.data Size: - Virtual size: 36KB

.text Size: - Virtual size: 16KB

.idata Size: - Virtual size: 4KB

.NewSec Size: - Virtual size: 4KB

.htext Size: - Virtual size: 4KB

.B^S Size: - Virtual size: 3.0MB

.ze5 Size: 1024B - Virtual size: 856B

.g4c Size: 5.5MB - Virtual size: 5.5MB

.bss
Size: - Virtual size: 48KB

.data
Size: - Virtual size: 36KB

.text
Size: - Virtual size: 16KB

.idata
Size: - Virtual size: 4KB

.NewSec
Size: - Virtual size: 4KB

.htext
Size: - Virtual size: 4KB

.B^S
Size: - Virtual size: 3.0MB

.ze5
Size: 1024B - Virtual size: 856B

.g4c
Size: 5.5MB - Virtual size: 5.5MB