4fbf1baf48bf73e9097a4294d995bc90 | Triage

Sharing

General

Target

4fbf1baf48bf73e9097a4294d995bc90
Size

31KB
MD5

4fbf1baf48bf73e9097a4294d995bc90
SHA1

7501f73981859a89ac187ecad5a44aff6a5ee537
SHA256

d48da5a8b85eb0f162fdf1344f9dc7cbd0d738e1b18d63ad40c130b6d10032f6
SHA512

82fb1aaa94912b57a0d28ef24140ffb6e437a7e4fa2d1fd4448b151c48b45682f1e2578e65dca92a21760e0a065ad5c9c79a1fbbf8838a85ec0ef7f4a17e46ba
SSDEEP

768:Z4h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQf3:WZ/nEkh8OTKNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fbf1baf48bf73e9097a4294d995bc90

Files

4fbf1baf48bf73e9097a4294d995bc90
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ