4e145dc0c9379ea3b706eb4bb31f4b180c661bc09657d59a6e0b33372da3c88c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e145dc0c9379ea3b706eb4bb31f4b180c661bc09657d59a6e0b33372da3c88c
Size

112KB
MD5

f9f19ccd24a2bbc1404aca7931169d26
SHA1

cd243fc5858cd8546fad3686e95ffa4d7a158e63
SHA256

4e145dc0c9379ea3b706eb4bb31f4b180c661bc09657d59a6e0b33372da3c88c
SHA512

f60b5af85e53f4a21ec5c7cde8873ad64f2741eeffc7106fc719dc0d87d864278b3d9b684d92016cf4e303a0de2e864714713fa7bf0dcf903e40f6fec43618b5
SSDEEP

1536:pciNG9RPJZiqxlwX5cgrpjzwx4c+C90wrBlZZsfnNjdAm3wap6oW4oWty:pERPuX3pox4K0wrnOhK4oWty

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e145dc0c9379ea3b706eb4bb31f4b180c661bc09657d59a6e0b33372da3c88c

Files

4e145dc0c9379ea3b706eb4bb31f4b180c661bc09657d59a6e0b33372da3c88c
.exe windows:4 windows x86 arch:x86

a6a90b4bd2f442fad17dd6db5bc715fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetDC
TranslateMessage
CharNextA
GetSystemMetrics
GetParent

kernel32

lstrcmpA
RemoveDirectoryA
lstrlenA
GetModuleHandleA
DeleteFileA
RemoveDirectoryW
lstrcmpiW
FindClose
GetWindowsDirectoryA
lstrlenW
GetCommandLineA
QueryPerformanceCounter
lstrcmpiA
GlobalFindAtomA
GetSystemTime
VirtualAlloc
CopyFileA
VirtualFree

gdi32

RectVisible
SetMapMode
CreateFontIndirectA
SelectPalette
SetTextColor
SetTextAlign
DeleteObject
RestoreDC
GetStockObject
SelectObject
SaveDC
CreateSolidBrush
GetPixel
GetClipBox
SetStretchBltMode
CreatePalette
GetTextMetricsA
CreateCompatibleDC
LineTo

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ