4638ca3dcf403856598c9055bef00430N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4638ca3dcf403856598c9055bef00430N.exe
Size

34KB
MD5

4638ca3dcf403856598c9055bef00430
SHA1

f465b941fb7eb4c162d5ea216d52028c2120f17b
SHA256

08a335880c3b7b64e98091dd9b9f4612e4472c027cf2109d9b25243914838784
SHA512

4a51b7173d410b5fa2bb2aef0f0bd9c141c3a3580b6971bd8b4d0870310c6adb7f33e50507b4899767e20b347c855fefc6e843699356f94b5799fb41abf91de3
SSDEEP

768:LZ+Zxe90i19C92eocaWTOD/86bspTlmCY:LaiZ19C92eocaWTO8ppc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4638ca3dcf403856598c9055bef00430N.exe

Files

4638ca3dcf403856598c9055bef00430N.exe
.exe windows:4 windows x86 arch:x86

20e0010628f1fc5ba04633e130c6e90e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TrackPopupMenu
GetWindowTextW
SetCapture
GetActiveWindow
IsChild
SendMessageA
MessageBoxA
DefWindowProcA
FlashWindowEx
LoadBitmapA
TranslateMessage
DispatchMessageA
GetMessageA
PostQuitMessage
ShowWindow
UpdateWindow
GetKeyState
TranslateAcceleratorA
RegisterClassA
CreateWindowExA
GetDlgItemTextA

kernel32

HeapAlloc
HeapCreate
CloseHandle
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ