4c44edbfb96521ca26196fdda571d406 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c44edbfb96521ca26196fdda571d406
Size

77KB
MD5

4c44edbfb96521ca26196fdda571d406
SHA1

a614f44c4b9566ca4262f7182187074855983f5f
SHA256

e7fca3d1870ba96810e2407506aeac6ff437785c2426c23adb29e630f4edae8f
SHA512

bab4a39fa2755697e4643c834efe031b8dea9889f27073d08be83541442448ceb8ec94dd7580f2d77fcfa31c3c1efc48bd838bffb86e5ba6be546c8bdc49293f
SSDEEP

1536:JTWz4xejSPBV+5df2I/Y/ix+EsYorUPrCbmKOYWlJ/S9ukBb:Fe4wj/DVpx+EIrUPrSOYWr/PkN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c44edbfb96521ca26196fdda571d406

Files

4c44edbfb96521ca26196fdda571d406
.dll windows:4 windows x86 arch:x86

d7c3508003fe891289158ff00efdabf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GetNumberFormatA

Exports

Exports

dvpyb

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ