4d4e0558aa8c6fd8ec78270a50b13e8a37306c4864185a0c6a0246e61e6f684bN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4e0558aa8c6fd8ec78270a50b13e8a37306c4864185a0c6a0246e61e6f684bN
Size

161KB
MD5

de335ed697a1b52347b3e030fe51ddd0
SHA1

7599f937c82b4bbf3ba70d7d7bb3e4245f0eb2c8
SHA256

4d4e0558aa8c6fd8ec78270a50b13e8a37306c4864185a0c6a0246e61e6f684b
SHA512

4ed3a9bdbd3d89298078bbf156937a81f0da07ac394ed4c34039431f19e07f51179b6616d35af56de83e8902ce3f7fc34852b98a02971f5b49f02e229eae5df6
SSDEEP

3072:b8ghf2DfDmtqD4YJNdR+kKD7Aadrma8Yqi/QmgltqLg90iRvEDLhal:b8ghYLIOVNT+7AaJBqanHEl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d4e0558aa8c6fd8ec78270a50b13e8a37306c4864185a0c6a0246e61e6f684bN

Files

4d4e0558aa8c6fd8ec78270a50b13e8a37306c4864185a0c6a0246e61e6f684bN
.exe windows:4 windows x86 arch:x86

c02575d953a9a4cf9cecbf68772316dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
CloseClipboard

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
SetFilePointer

advapi32

RegSetValueExA

shell32

ShellExecuteA

ws2_32

sendto

msvcrt

_adjust_fdiv

ole32

CoInitialize

oleaut32

GetErrorInfo

Sections

.text
Size: 20KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE