4c9d611cfb8c4944dfe20071ff0cba40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9d611cfb8c4944dfe20071ff0cba40N.exe
Size

25KB
MD5

4c9d611cfb8c4944dfe20071ff0cba40
SHA1

4ee91e6da27e91173c3e6b983aa0bbac5f15c372
SHA256

73f4860b7438301bca9daf78bdf46bb204f65165d2ddabc235f570ed1e6c5040
SHA512

be600feef195a9d9e58f99d01f68886fc41574c3546276be31a15d6e819c79758bf561f10939827e09242b7e096b7b4b2a65c5297c8ec73fdb069551718d2fcf
SSDEEP

384:uzP7cQB1sgKWt0R+DB295BdenlDLgjDZqtFLGPIDN:uzP4BgDt3DXlDIdq/SM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9d611cfb8c4944dfe20071ff0cba40N.exe

Files

4c9d611cfb8c4944dfe20071ff0cba40N.exe
.exe windows:4 windows x86 arch:x86

bd7b859f05f0a6fc90edae991f7ebd76

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxIndirectParamW
GetDlgItem
RegisterClassExW
CreateWindowExW
GetCursorPos
MessageBoxW
ShowWindow
UpdateWindow
DestroyCursor
CreateCursor
SendMessageW
ShowCursor

kernel32

CloseHandle

comctl32

ImageList_Create

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 810B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 154B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ