4d0a859b5f45a0e4e3317ceafbdb8982 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d0a859b5f45a0e4e3317ceafbdb8982
Size

104KB
MD5

4d0a859b5f45a0e4e3317ceafbdb8982
SHA1

f5afe3d8b65ee5282bce2dc225ac9b74ab83af68
SHA256

c2641b4c145a9f84b3b5e222a3274c8c8f123de0d4dce75d887b691376801bdf
SHA512

0707db61374f4f3f803a881e13eba501523e1eb781902c33fe44839ee1e4746a4397245e1d840c04c2aa0a1158d1e6d80ce2f51088560e645ddebfda6e0a2147
SSDEEP

3072:4fNjoYQll9EpaHBQ5NFGcAin77BnJfm6:4FClcrFG3i77tJfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d0a859b5f45a0e4e3317ceafbdb8982

Files

4d0a859b5f45a0e4e3317ceafbdb8982
.exe windows:4 windows x86 arch:x86

d7128dc0e53c7d7d21048395ef7b3a5c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GlobalSize
GlobalGetAtomNameA
FileTimeToSystemTime
GlobalUnWire
ClearCommError
SetConsoleLocalEUDC
LCMapStringA
IsDBCSLeadByte
GetDiskFreeSpaceExA
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack329
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA