4081e6a4f1da17d09231f124428bee10 | Triage

Sharing

General

Target

4081e6a4f1da17d09231f124428bee10
Size

87KB
MD5

4081e6a4f1da17d09231f124428bee10
SHA1

2dfe391211be7c2b86640795955969bb759e4ad4
SHA256

46f5c680eafb00a1ccce4f1e2c92d62fe833feb73fe25adc51cb0b8fc121e129
SHA512

750c4805615aff601318e88e77e047e43d621c9d4bfe2c0446164fd78bfa084b854596fd76c10cb2effecf77a4d070299554d4a7a4c366cf1e0210ac8db9bcc7
SSDEEP

1536:dfiii1yEb2jwUJFmhnKBxTaPETB8ZXLP45rO0ZOWpjVrs2ryrd1vUQuq5Eer/:Oyw/UJFmYxOcTBwr4bZDHs2qj7/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4081e6a4f1da17d09231f124428bee10

Files

4081e6a4f1da17d09231f124428bee10
.exe windows:4 windows x86 arch:x86

f6512983df9e0614692e4d1ec5312676

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointerEx
GetConsoleCursorMode
SetEvent
EnumCalendarInfoW
InitializeCriticalSection
GetCurrentProcess
GetVersionExA
WaitForMultipleObjectsEx
UTUnRegister
SetupComm
ReadProcessMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE