4165fba091786957d3745fac47605fdb | Triage

Sharing

General

Target

4165fba091786957d3745fac47605fdb
Size

461KB
MD5

4165fba091786957d3745fac47605fdb
SHA1

b9c55ccf75985721e51f0a622651d23572728105
SHA256

94e2d8328b8fa1ff5b0f47a5522a3634fcf0a697c03038145404976330e4d810
SHA512

eac405a2394b07f174892527fb423fb971aebbc82c159951ad2a568f771ca91bc6d83dbdf7b24cc0603365e07b9af478aa39744e8ac3699cd682e4d078bc5375
SSDEEP

12288:g1PMi4UQ48dWqndVndgDpm9paeAVLm8pV:QU7WCXdP9WmuV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4165fba091786957d3745fac47605fdb

Files

4165fba091786957d3745fac47605fdb
.exe windows:5 windows x86 arch:x86

b08717f1e27f04c43d2804b2b39e9b79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
TerminateProcess
DeleteCriticalSection
CreateFileW
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
LeaveCriticalSection

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ