4864681fbcbe9616fbc13dd3cb4d1cf7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4864681fbcbe9616fbc13dd3cb4d1cf7
Size

176KB
MD5

4864681fbcbe9616fbc13dd3cb4d1cf7
SHA1

535f4af6308fe5c569d1a7e007e8d9e97ca40815
SHA256

5c2654d7c12aa81b6a4ae3555e1b936f06304a55b1935960de583acc9f83a044
SHA512

988cffc135f3dc6af6e67217e03a2c9357cad3bbb58c327c3b1bd7a51c50142ba52302b4a35581c57c6d9839a1a430934d2a6217989a71fb08c987312a1bfbdc
SSDEEP

3072:oZOqBvlrKpgCDoL+pMZ6Ho3H1gXmUIu9JVnCf5qfa1wweTqCYeXo0:oTBvBKpgC9x2ymUt9JRowSoqCV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4864681fbcbe9616fbc13dd3cb4d1cf7

Files

4864681fbcbe9616fbc13dd3cb4d1cf7
.exe windows:5 windows x86 arch:x86

9141ca4c738aba36c87b7b06439a7237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncpy
mbstowcs
_cexit
wcscoll
remove
_exit
__p__fmode
__setusermatherr
_XcptFilter
__p__commode
__set_app_type
_controlfp
_initterm
_ismbblead
exit
_amsg_exit
__getmainargs
strchr
printf

shlwapi

PathFileExistsA

kernel32

GetTimeFormatW
CreateEventW
GetSystemInfo
FindResourceExA
IsDBCSLeadByteEx
lstrcmpiA
DeviceIoControl
SetCommTimeouts
SetLocalTime
DefineDosDeviceW

Exports

Exports

_DefWindowProcWDefWindowProcWDefWindowProcWDefWindowProcWDefWindowProcW@TUrD�(�E

Sections

.fgghg
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uytu
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ