4bc6f636be9020882d02ed7db6133385 | Triage

Sharing

General

Target

4bc6f636be9020882d02ed7db6133385
Size

14KB
MD5

4bc6f636be9020882d02ed7db6133385
SHA1

0e40eeac55af19ccabd73e4c7cede46445a28297
SHA256

3f5c98b76bd3df9540a03413c881e7b4f1eebf00f251d86827374690810d4c0f
SHA512

7f291f129924ec1f6abc37dfaed119c7853c48fe68e594711f048b18793b99fd81e14c4006c2a3982328d8d52eb54d2bc983073bf5231ca55fb9083285202963
SSDEEP

384:wF7TenpkkZsdbT3aPL+lUHz/fAZha/X2:kTWpvqdbb4eUT/f8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc6f636be9020882d02ed7db6133385

Files

4bc6f636be9020882d02ed7db6133385
.dll windows:4 windows x86 arch:x86

ccf11a2b17ba3e581b3f39cbfb15b05c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

VirtualAlloc
VirtualProtect
CreateJobSet

Sections

.text
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ