4a269b285b6ba3c79a86d7dcb3ae1a05 | Triage

Sharing

General

Target

4a269b285b6ba3c79a86d7dcb3ae1a05
Size

46KB
MD5

4a269b285b6ba3c79a86d7dcb3ae1a05
SHA1

054981ae343fb8a936896856862bda893eacd9f1
SHA256

47c5785c14b34c6bb73de886811e0d3386136cab8d98d0e300a22a66920039dc
SHA512

f00d292e4c8980cf24afe08d0daf37c377497f5c25992f91e844769c9b8ded6e62d52e2b628b53801320ff8b6b55fb1a5f3c4c41236550e0243ead64997d1a2d
SSDEEP

768:IgknZ3k0JR46pX2NNb0ERPDB0EUXSUBO6jM0WcKkF/sZDvKsfs:If7RFpXa0EB0zi6+cnWL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a269b285b6ba3c79a86d7dcb3ae1a05

Files

4a269b285b6ba3c79a86d7dcb3ae1a05
.exe windows:4 windows x86 arch:x86

e3cde5107f2ff2bb084946d4b234ef70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

kernel32

SetLastError
VirtualAlloc
LoadLibraryW
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
GetCurrentThreadId
QueryPerformanceCounter

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE