4cc28684661b28ffd8b62b9b915f1c5011b12515fbde7a11f1a581615d48ea66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cc28684661b28ffd8b62b9b915f1c5011b12515fbde7a11f1a581615d48ea66
Size

20KB
MD5

0cc78348379885cb435ec00f87f1a87b
SHA1

842818e705b7129cbb088b306fcc25b85028c04a
SHA256

4cc28684661b28ffd8b62b9b915f1c5011b12515fbde7a11f1a581615d48ea66
SHA512

72cfdf329a11c70184cc7cc666976637e96aeffb315daaafc158d502dfa9cd7805199aeefb549ce65240a04daffbdb180208538f76cec56ad0c98eb416309f7f
SSDEEP

96:IzwVWdGfR3O3zZE/8A8uQcTWS6rSogY8bkR31WqT:IUMdGp3ODeQHSw0Mx1TT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc28684661b28ffd8b62b9b915f1c5011b12515fbde7a11f1a581615d48ea66

Files

4cc28684661b28ffd8b62b9b915f1c5011b12515fbde7a11f1a581615d48ea66
.exe windows:4 windows x86

148c839f803e32c8ad5cba86b2da5092

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateProcessW
GetCommandLineA
GetCommandLineW
GetModuleHandleA
GetModuleHandleW
GetStartupInfoA
GetStartupInfoW

shell32

SHGetFolderPathW

ucrtbase

__p___argc
__p___argv
_configure_narrow_argv
_get_initial_narrow_environment
_initialize_narrow_environment
_set_app_type
exit

user32

LoadStringW
MessageBoxW

Sections

.text
Size: 4KB - Virtual size: 896B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE