4b84f69e0d615acf9172ef4ba672ee90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b84f69e0d615acf9172ef4ba672ee90
Size

225KB
MD5

4b84f69e0d615acf9172ef4ba672ee90
SHA1

03cf3074e23f9e80d1b91f772543fad7c1d4a1bc
SHA256

6441f399038cbce4a2c8fc1c0cb2af61be1e9604ca3225484e6d0d733e61ac0b
SHA512

ddbc7c2613ac3fbf7ea02bbeaa7b1e7b8bbdea6c1d35b662c8f0259b15c707bd64b1c1a9e85ff6eac59603d2d3636437582f4b62d40a995c02e0d40ba44cbced
SSDEEP

6144:4b62AH/de+E7R+GqDy3cksc0XFP4qua+9CoEyOp5l3pC29O6I:6bAH1e+g+Gquskj0VAra+9CoEyO1J9e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b84f69e0d615acf9172ef4ba672ee90

Files

4b84f69e0d615acf9172ef4ba672ee90
.exe windows:4 windows x86 arch:x86

5a4c3ed95a1bb8b5028f3c0b77572f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
FindResourceA
GetModuleHandleA
FindClose
lstrlenA
FindNextFileA
FindFirstFileA
GlobalFree
CreateProcessA
GlobalAlloc
ExitProcess
LockResource
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
SizeofResource
CreateFileA
WriteFile
CloseHandle
GetLocalTime
SetFileTime

user32

wsprintfA

advapi32

RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 213KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ