4248bbd45ec71e16bfda6cfd3a5e0716 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4248bbd45ec71e16bfda6cfd3a5e0716
Size

99KB
MD5

4248bbd45ec71e16bfda6cfd3a5e0716
SHA1

6654d5f85134c70238df028784e9d2a129738aee
SHA256

0c4812c4fac8d308cf866cc0fbefa2c4002915139f4937130b72210b0f1b221a
SHA512

68eb678482a8239aa063c1402c55bce91bb90994dce7e97f56cf93e0459b4e1e330d4567cd527482973668f9ba604b86c576e5aa17a3ceedbba564516b2128f9
SSDEEP

3072:Tn1sPyzul9tgSCGMhoy9sngRXSr/6VWacRLyANmJ:zm19tgSC7a1ngRiz6kR2HJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4248bbd45ec71e16bfda6cfd3a5e0716

Files

4248bbd45ec71e16bfda6cfd3a5e0716
.exe windows:4 windows x86 arch:x86

cee9eac69a32ee84176b5645b2cb5210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
lstrcpyW
LocalHandle
CreateEventW
WaitForMultipleObjects
HeapSize
GetModuleHandleW
HeapAlloc
LocalHandle
GetEnvironmentVariableW
TryEnterCriticalSection
CompareStringW
MulDiv

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 90B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ