4fe90e135998bbb3294e2ef4b9de0b6898ecf850539955f8026f715c78f949bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fe90e135998bbb3294e2ef4b9de0b6898ecf850539955f8026f715c78f949bc
Size

5KB
MD5

29ad1b38046f5af2fb715c21741e6878
SHA1

a18c1c000328e77c2ff1667bbe2af8b39f640376
SHA256

4fe90e135998bbb3294e2ef4b9de0b6898ecf850539955f8026f715c78f949bc
SHA512

1583f9d916cf860809aedb61fe43dd5e7ab254b5e0fa0081a0eb96ad49f766a7c9a2d0b66b599aa9d323953171d7aceb92503ec073bdbc6505141a501ae2e94b
SSDEEP

96:zI5CMdk1HMdk1yxxUTf+et1m+lL63NwaFhhNvoynz:zEO1sO1NPm+t63NwcNvoynz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fe90e135998bbb3294e2ef4b9de0b6898ecf850539955f8026f715c78f949bc

Files

4fe90e135998bbb3294e2ef4b9de0b6898ecf850539955f8026f715c78f949bc
.exe windows:4 windows x86 arch:x86

2324b91281fa351f537d24221baeaa93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
lstrcmpW
CloseHandle

user32

wsprintfW
CharLowerW

advapi32

RegQueryValueExW
GetNamedSecurityInfoW
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyExW

msvcrt

_controlfp
??3@YAXPAX@Z
??2@YAPAXI@Z
wprintf
__CxxFrameHandler
_CxxThrowException
exit
_exit
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

netapi32

NetLocalGroupAddMembers
NetUserAdd

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE