4204ed478935114094eaca87f0c1f61a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4204ed478935114094eaca87f0c1f61a
Size

16KB
MD5

4204ed478935114094eaca87f0c1f61a
SHA1

ec9858fccadc6326465b8e0bbab8c5ace6096e92
SHA256

0ce17993fc5b4a047599db1eca142ddd11d1e77387cbe0152f51ec6ad77822f9
SHA512

8f1c90ce0e53fee4b48f2aadd1c772c61cd8ee0931ea260892f9a81f78cb3755d1852bc3ca032222d3c60d4911b05dec32459663ebef1ebb4250c8b487806d46
SSDEEP

96:kbYG2M0/GKQUiqWELK/GGrxjyhDVfiPip7PtboynN:07KkUYESd4DVfiPSP1oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4204ed478935114094eaca87f0c1f61a

Files

4204ed478935114094eaca87f0c1f61a
.exe windows:4 windows x86 arch:x86

8d79af9303f80c4e7f91ed3d61dedbe2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetFileTime
SystemTimeToFileTime
GetSystemTime
CreateFileA
GetPrivateProfileIntA
GetSystemDirectoryA
GetFileTime
WinExec
GetLocalTime
WritePrivateProfileStringA
GetStartupInfoA
GetModuleHandleA

user32

LoadIconA
LoadCursorA
GetSystemMetrics
CreateWindowExA
GetWindowLongA
SetWindowLongA
SetWindowPos
SendMessageA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
WaitMessage
PostQuitMessage
DefWindowProcA
RegisterClassA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_itoa
__getmainargs
_acmdln
exit
isdigit
isalpha
sprintf
_exit
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE