4479ee12342a8b263815c11544f16a10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4479ee12342a8b263815c11544f16a10
Size

80KB
MD5

4479ee12342a8b263815c11544f16a10
SHA1

7fbd0105cc344fef0167a6ccb7af32f7901f570e
SHA256

55abff0dccc3a197484418ffc8f71317623fc33bac59f2ef758a264037b14cf7
SHA512

400857b02cc0aa1641cf15db8d383d810004f8a9eee3af4208c12f5d334251bd8ad10d368e592bd698b36884cd2f338d6133c276fa014218c57572978c247818
SSDEEP

1536:XaJj/N83olSkCWk1qktfabJPQjFwiSfd82hW8fPL:XCN8iSkTkEkt2JIw98vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4479ee12342a8b263815c11544f16a10

Files

4479ee12342a8b263815c11544f16a10
.exe windows:4 windows x86 arch:x86

55037b6e85327de736afecc31f81c4d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeWritePtr
lstrcmpiA
GetOEMCP
SetConsolePalette
SetLocalPrimaryComputerNameW
WideCharToMultiByte
GetProfileIntA
SetVolumeMountPointA
lstrcmpiW
VirtualAllocEx
GetLocaleInfoA
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE