4bc8310beb270be5b230a4fb5ab88a06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc8310beb270be5b230a4fb5ab88a06
Size

76KB
MD5

4bc8310beb270be5b230a4fb5ab88a06
SHA1

0b1b498a64a13e52ac720601484e0f91040d2c1a
SHA256

31e0c56ff7934027ba97eed1ffcc5f382a06a5839ee15d9b1c27cb2306a2a773
SHA512

0d436ff15206a87fd86ded721894e126c8d6aa013f74ec2f2e95e3f13ffe1ad0e668561ff2fd838a2ce8acecf2d3a3766258a3dc64e3c0e947ecde245b52fdf9
SSDEEP

768:fUwcgy4UNGCAvYllMStps9ll8GXMh5lLSxnjSB1KvoBdzJ0U4Apr8Jr:MXNGRStCO3TleJjulF0Or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bc8310beb270be5b230a4fb5ab88a06

Files

4bc8310beb270be5b230a4fb5ab88a06
.exe windows:4 windows x86 arch:x86

e5a66515e9d7ae5221dc7b1ac10810b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
FindResourceA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualProtect
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadResource
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
HeapReAlloc
VirtualAlloc
WriteFile
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetOEMCP
LockResource
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ