04f9a52c78eb175b469ce08211075f3a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04f9a52c78eb175b469ce08211075f3a
Size

76KB
MD5

04f9a52c78eb175b469ce08211075f3a
SHA1

8b09374157809f4881d13e1c008ce75b708990b2
SHA256

2c72537b0c72c6b4b6035adca902e957f363d1d41852d8b09393ee8129c05ee4
SHA512

aff88cb7ab3f6d6445833f8ae7379e9c4ec97de9edbd13028005d9421d1e8c1e05b15a12c070a4dd65d5471859e38d6870c20d596e8ba5af8ae0e628abc3b634
SSDEEP

1536:C/jwwwwOZp0dIbgYqj3kjcewugtYOcathSktmZn9ApvQtoOpjVrs2ryrd1vUQuq6:CU2Ibo4jNwRtYjafSk0ZnipwNHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04f9a52c78eb175b469ce08211075f3a

Files

04f9a52c78eb175b469ce08211075f3a
.exe windows:4 windows x86 arch:x86

b4af3c90cde5acf314551311349af7c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapExtend
CreatePipe
SetConsoleKeyShortcuts
GetComputerNameW
Heap32Next
CopyFileExA
VerLanguageNameA
SetUnhandledExceptionFilter
EnumDateFormatsW
PrivMoveFileIdentityW
RemoveLocalAlternateComputerNameW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE