4a20f6c4d7eaf819f581f13ea7d690be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a20f6c4d7eaf819f581f13ea7d690be
Size

19KB
MD5

4a20f6c4d7eaf819f581f13ea7d690be
SHA1

22afd85cff2f91fb82c2f9b99a6982146826534e
SHA256

d56990db7407e929a0d1e122acfd58066f4d2836158d9dfdeb01721acc4bf672
SHA512

97ee15b2881394fedfe87a562bcda85fbeec0ccad7e59d7ca45a4be94344fa46279b5d8a4dd9aefb484fecc76e241778f25619fa90a2ac1f785ee8ec095e5661
SSDEEP

192:gkekh7LQ2680Db0m6kXSPlxmzsysBOWVTJ81as0:gkekh7c2p0PftiSzxU5Gar

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a20f6c4d7eaf819f581f13ea7d690be

Files

4a20f6c4d7eaf819f581f13ea7d690be
.exe windows:4 windows x86 arch:x86

ac01fa984d9ff84080c8e0d6a7e29f0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
CloseHandle
FreeLibrary
GlobalAlloc
GetStartupInfoA
GetStdHandle
GetModuleHandleA
LocalFree
CreateEventA
Sleep
lstrcatA
GetTickCount
lstrcpyA
LocalAlloc
GetFileSize
GetLastError

user32

SetFocus
BeginPaint
GetWindowRect
GetFocus
PostQuitMessage
LoadIconA
DialogBoxParamA
DefWindowProcA
SetWindowTextA
ScreenToClient
ShowWindow
EndDialog

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ