4f149485bbe372f649631620ab15b190N[.]exe

General

Target

4f149485bbe372f649631620ab15b190N.exe
Size

315KB
MD5

4f149485bbe372f649631620ab15b190
SHA1

3c4b5b5adb75fbeabd52ea98ea829c76a5c853e6
SHA256

0b101f532f688a20989b4d6d6e1f83597320570e0d0c045d3b65626d493897b0
SHA512

050227652875f361ccb35ccb3afb23633deba7bb11a321d4374cbff047c0918af6833347e6f70350be68ff19121b7666bfa62949c71578187bf4abed84be98e1
SSDEEP

6144:c9M8+quSSGfbNiDrhhjOFqS1r+mout53AXXa3Kgvfm:c3KJM5EDSF+lgGa6gv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f149485bbe372f649631620ab15b190N.exe

Files

4f149485bbe372f649631620ab15b190N.exe
.exe windows:4 windows x86 arch:x86

d9fd2f6e49703b926753f06b57ac2b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetEnvironmentStrings
TlsFree
GetCommandLineA
RtlUnwind
IsValidLocale
GetCPInfo
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
VirtualAlloc
UnhandledExceptionFilter
Sleep
HeapReAlloc
GetUserDefaultLCID
CompareStringW
GetTimeZoneInformation
GetLocaleInfoW
TlsSetValue
GetModuleFileNameA
GetOEMCP
IsValidCodePage
ExitProcess
GetStringTypeA
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
InterlockedDecrement
GetLocaleInfoA
SetEnvironmentVariableA
QueryPerformanceCounter
CompareStringA
SetLastError
FreeEnvironmentStringsW
WriteFile
GetCurrentThreadId
GetLastError
HeapAlloc
HeapDestroy
HeapFree
GetModuleFileNameW
VirtualFree
GetCurrentProcessId
GetACP
LCMapStringA
InterlockedIncrement
GetEnvironmentStringsA
SetConsoleCtrlHandler
GetFileType
GetStringTypeW
LCMapStringW
GetModuleHandleW
SetUnhandledExceptionFilter
TlsGetValue
EnterCriticalSection
GetCurrentThread
GetModuleHandleA
DeleteCriticalSection
GetStdHandle
FreeLibrary
GetProfileSectionW
WideCharToMultiByte
FreeEnvironmentStringsA
EnumSystemLocalesA
GetEnvironmentStringsW
MultiByteToWideChar
GetProcAddress
GetTimeFormatA
HeapCreate
GetDateFormatA
TlsAlloc
InterlockedExchange
SetHandleCount
TerminateProcess
HeapSize
VirtualQuery

gdi32

EndPage
SetArcDirection
CreateFontIndirectA
FillPath
MaskBlt
ScaleWindowExtEx

user32

GetWindowModuleFileNameA
UnionRect
CallWindowProcA
DialogBoxIndirectParamA
MessageBoxExA
ReplyMessage
DeferWindowPos
RegisterClipboardFormatA
FlashWindowEx
DlgDirListComboBoxA

Sections

.text
Size: 159KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9fd2f6e49703b926753f06b57ac2b50

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Sections

.text Size: 159KB - Virtual size: 159KB

.data Size: 142KB - Virtual size: 141KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 159KB - Virtual size: 159KB

.data
Size: 142KB - Virtual size: 141KB

.rsrc
Size: 12KB - Virtual size: 12KB