4e30a98bfabd0a4d36072058df5ff9e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e30a98bfabd0a4d36072058df5ff9e8
Size

89KB
MD5

4e30a98bfabd0a4d36072058df5ff9e8
SHA1

f9032d82f4601efe0fbeb182a5fba7d796babffb
SHA256

cb77d8312bf7d2db97ebbc3fd8b849fa6a05b8b2b4ad994df9ef1bb0369cc3b6
SHA512

00300d14ad729a4775cfd55647ae1b16742d025bdcd8c151b234737d4ba57b63685227c94157bc36c799c636fdc66e344bf509df555fe78cccd60f0521b5767d
SSDEEP

1536:asG8buWuk7EinQ5GRiQ+c1XH3PbPIy0/tlNcuZ18qgn2k3dOGNWLW7yxtid+Labx:TVW2EiQ5GRiUJH37Iy0/tliuvaKLPxsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e30a98bfabd0a4d36072058df5ff9e8

Files

4e30a98bfabd0a4d36072058df5ff9e8
.exe windows:4 windows x86 arch:x86

42168c3cc76297aa0e35a07be235d859

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
VirtualAlloc
GetLastError

Exports

Exports

ewxcv
qazed
rfgni

Sections

.code
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ