4d1719e2226955cbf8370b1b90d228e163c2bf8879e7e28f1531bcb0aa58e098 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d1719e2226955cbf8370b1b90d228e163c2bf8879e7e28f1531bcb0aa58e098
Size

6KB
MD5

ea19a9b35f793251baa9e34d194e627e
SHA1

cc9ba9a936466bdbd78f33788281fa9c0ca4e4c3
SHA256

4d1719e2226955cbf8370b1b90d228e163c2bf8879e7e28f1531bcb0aa58e098
SHA512

8851bb9281ba3ece9b4862a79f638942a911687d691c680108ea047f8360fc1e1e22d2bc15b627ad7068dac47b6269f284255854c0b8b54e4e10d12c3446fa7a
SSDEEP

48:Sdbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uKO:40mIGnFc/38+N4ZHJWSY9FI5WqLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1719e2226955cbf8370b1b90d228e163c2bf8879e7e28f1531bcb0aa58e098

Files

4d1719e2226955cbf8370b1b90d228e163c2bf8879e7e28f1531bcb0aa58e098
.exe windows:5 windows x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ