04d19e6fc7a44a4e98f469007445fc17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04d19e6fc7a44a4e98f469007445fc17
Size

330KB
MD5

04d19e6fc7a44a4e98f469007445fc17
SHA1

bf420239886188b8639efc2f43c5823dc26b898e
SHA256

722cac403fe847618406fca00aaeb269b0a046e23a94ab848cba8cf319f94170
SHA512

dae5632ff3bfd3e699b9689e92ad23bbcf6f1d303ef5e2ad286dbeda71377b5b0df30677e8f5332eda17e92ada76b07085086947128961bcbb66f7c57ea772e0
SSDEEP

6144:feMVFZfA8Yx4IrrqQmxRB/g/J/qUR6zXfYntbSgZdO3aI5:feMVFGtx4BnXB/g/J/mfYPX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04d19e6fc7a44a4e98f469007445fc17

Files

04d19e6fc7a44a4e98f469007445fc17
.exe windows:4 windows x86 arch:x86

659b42915cdf504c9e7949e2ffe014f9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetLastError
GetProcAddress
VirtualFree
HeapFree
ExitProcess
Beep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
HeapReAlloc
HeapAlloc

netapi32

NetDfsAdd

avifil32

EditStreamPaste

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 533KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE