4023c1e2bd1e70aed129fcd6a58df22f | Triage

Sharing

General

Target

4023c1e2bd1e70aed129fcd6a58df22f
Size

57KB
MD5

4023c1e2bd1e70aed129fcd6a58df22f
SHA1

dcd1361ab29ce1c2d3a9c786b4fd58b04222cb19
SHA256

67752e2f50674670fb58bfb89ccfb4c7f41abdf34944a04fea79c05d1edd1c0f
SHA512

7e8d92252b04021c88dfb08fdbd076111341dc1d5040f434e5148c6eba2ab51b8946ed5a9bf7e8b94a42611008abf24236314155282d98d41ff6a02871d5fbab
SSDEEP

768:3Ddjl9yHkrAoV+KOwOBIJCTj59WY8QiMso5fl9e1Xl1tqylIwW/+wpzre7+h3:3JjlcPoZQBIkTjXsW5flAhq/wgZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4023c1e2bd1e70aed129fcd6a58df22f

Files

4023c1e2bd1e70aed129fcd6a58df22f
.exe windows:4 windows x86 arch:x86

da3658085b6d2dfa6c780740b7fd0390

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
CreateThread
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE