4491aed06e9e155d5eded57676861c7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4491aed06e9e155d5eded57676861c7a
Size

126KB
MD5

4491aed06e9e155d5eded57676861c7a
SHA1

d73feb115e6596cd2e78fe149347fa93b6c4136a
SHA256

2c0fc97d05697939d77052782db639bddfd4ac13029720258d215998de3faa95
SHA512

8f8ab5301a78fb4c6f014ee1843dc88e275f342bb75f4a5a78afd839c6a0e502d351c6149d1741eb675dee2f0938a5d76619fc351b975c349a9f01aacee87c03
SSDEEP

3072:Hz5cZ2HgU6VOdCEQGnjpyP39rkD0irPomkS:Hz6oHwVOfDn1yP3VMzom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4491aed06e9e155d5eded57676861c7a

Files

4491aed06e9e155d5eded57676861c7a
.exe windows:4 windows x86 arch:x86

69848ba2fad42e9c181ad1835b41eae0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetProcAddress
GetModuleHandleA
GetCurrentProcess

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ