4b5ea1b583b9bb780d19ed81981ef598 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b5ea1b583b9bb780d19ed81981ef598
Size

132KB
MD5

4b5ea1b583b9bb780d19ed81981ef598
SHA1

f5058ad4c3c7799511b34b5d9c05e08f74fcab6f
SHA256

8f7db938101d0004dad5d9525d09cda93dcd3f152719588b35cce0a58327bb71
SHA512

361a190e7642c7d25a28504464482886ad4d104454a79393883a854161b72b54ab2a2d4ca4449c33a72962a0652f279c224df6b7cb212f4d57360c93a39ed2b2
SSDEEP

3072:MqY/I2k1a0SXqME9PHOnAT6fQJGfRiApkAjsti4JP5pLxn:MqYVs7W48ZiPAYtj5j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b5ea1b583b9bb780d19ed81981ef598

Files

4b5ea1b583b9bb780d19ed81981ef598
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

mmAWcRhk
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

9edg9Dmt
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE