4682f92946925a74b1d1102d645201bd | Triage

Sharing

General

Target

4682f92946925a74b1d1102d645201bd
Size

174KB
MD5

4682f92946925a74b1d1102d645201bd
SHA1

e7be4b09b189d2237c2b01385b5416e74b50e26b
SHA256

dd77551ee4d22d0a5efe46f35b84880f185e6ca81d8676b2f5bfb76d7c63c556
SHA512

bcd73bd5b3908aa36130089cb7daa11e5810b320f8a5968516816bef58a32fc62e40becd6ec67b59dc654a7702541bf052f08eb3bf3628b4ce4062b1a3b2d590
SSDEEP

3072:Ank/lLf0CI6bMzPbKKSgvOfKyq6FgeVd+jOqA0emIp0E1r0ufqmgbHMxGf9PR4LV:j7Fg+oy0emIpJ1r0FDgGZGKyRsol4ODJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4682f92946925a74b1d1102d645201bd

Files

4682f92946925a74b1d1102d645201bd
.exe windows:4 windows x86 arch:x86

78ac63684aa189987f9a9b4ef9f4eeb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE