4200457774866fcf7d971542104d90f8641d30452def1827807e4d451d551744 | Triage

Sharing

General

Target

4200457774866fcf7d971542104d90f8641d30452def1827807e4d451d551744
Size

4KB
MD5

296fda093d6ac58b4328af976e8d970c
SHA1

b8f8b2812ebc4bfb86b62d48fa8a864816c967e2
SHA256

4200457774866fcf7d971542104d90f8641d30452def1827807e4d451d551744
SHA512

a691099b2a0e40fefa967d4625521b9ad5fe1bf6ac0d6e70da09261d12325cf3a5d3675992c0d98e55f569a2522bf8fb3c2456f41a3b165548ca69793b8a448a
SSDEEP

48:Sf9vo2vV+TAvO+Ce2MLpPPrhup3R/Ywgl9jjW3RuqS2:CLvoTgOOumPWhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4200457774866fcf7d971542104d90f8641d30452def1827807e4d451d551744

Files

4200457774866fcf7d971542104d90f8641d30452def1827807e4d451d551744
.exe windows:6 windows x86 arch:x86

d7a4f8aa00d902f27e85c55eaf1784ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
CloseHandle
GetLastError
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter

shell32

CommandLineToArgvW

ntdll

swscanf_s

Sections

.text
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ