4858ee40766d90cf36e3759025253b7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4858ee40766d90cf36e3759025253b7e
Size

66KB
MD5

4858ee40766d90cf36e3759025253b7e
SHA1

1f2e57a98baf4cd30efca1db5670beacdb430f5a
SHA256

e7d2cbe81ddebd76e8107a3cb9d829efe0ba0b5aa0f257a121a60cd0eeafe030
SHA512

daa11c5b525c07331e836dac987c3b49bb2532db5d728dbe6a755758b43a0b7616d31b2b72ff6cbcc980b3e4d5713571a53d53c40a07bfcc9420c35dfe1e4bcb
SSDEEP

1536:7jK1frHXNji+hWADWsw0gOkezwhZiii4hO:7jKZBj5W2Ws/1MO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4858ee40766d90cf36e3759025253b7e

Files

4858ee40766d90cf36e3759025253b7e
.exe windows:5 windows x86 arch:x86

c49d68c0f4ffc859a0730f9d64be5ed6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateFileA
lstrcatA
GetWindowsDirectoryA
LoadLibraryW
GetModuleHandleW

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.455
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ