4142a1f4ef940787327ee684f8a1f53e | Triage

Sharing

General

Target

4142a1f4ef940787327ee684f8a1f53e
Size

61KB
MD5

4142a1f4ef940787327ee684f8a1f53e
SHA1

69a3430009e47a84b12cf84ec66331fb17c12e01
SHA256

18872960cce1e4f9ae08707d3caa0a4b1efd7548ecfb7b8c513118a1f83b3130
SHA512

1fcf686fda10e97f17396db0d85e6472a28ff76cc97ae2a8163ed1da2004017034cac034319a47b88272bbd1f45419b98acf16ec401ad205035c82c22b2a4603
SSDEEP

1536:z/cl8PAwCB6QYqC8bZIiFTTNj60oZk/hI7dMi8vF:YOI68CwFNiZfdN8vF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4142a1f4ef940787327ee684f8a1f53e

Files

4142a1f4ef940787327ee684f8a1f53e
.exe windows:4 windows x86 arch:x86

c8f468f0ff692b97e5d3e75acb48062b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE