4e421f0e11d258752f6effe5cd54e909 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e421f0e11d258752f6effe5cd54e909
Size

690KB
MD5

4e421f0e11d258752f6effe5cd54e909
SHA1

ac1c396878e8b4f409143fc9d00ae39affe36649
SHA256

af2b824acc182aea929b6ccd84045cb9ef27dac526c9a21e37dfa803e4c76ebe
SHA512

cedf58e11e914e93b66431d57ddba1874972ebc3dd2fe84426bb73dc94b6b9dd0134763e151c463014d80eb52950327fb900ed13870218092fa19d2f8f09f51f
SSDEEP

12288:CUF1Y7ODQIZ//qJmxR0kVtktVpr8PrfOkYWKWv/IB+ADltCnTUcaPLoEDqKKY3SC:CUFa7K4Jm/fVtktVGPrfO/WxvaXUTcLD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e421f0e11d258752f6effe5cd54e909

Files

4e421f0e11d258752f6effe5cd54e909
.exe windows:4 windows x86 arch:x86

d436c55cc61e4d62b21359ff12be3c38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvbvm60

MethCallEngine

Sections

.
Size: 675KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE