4548cb4f1f5791eb4a04ce8e0af67d13 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4548cb4f1f5791eb4a04ce8e0af67d13
Size

33KB
MD5

4548cb4f1f5791eb4a04ce8e0af67d13
SHA1

b8a7be0415b98c5366d8b52e0c6201c4ba24a955
SHA256

50e8af016d35a8f7b5d28d7ae92fc6a9a31fc6bb493d7d7667e6bef7e6b1c199
SHA512

26a6401283e1c6d3c7cc4153e5e0cfece00baa2b90185720ae6889efdb35a73450e0d7e0cae2256e1a827b96c5e30c30e8e61b763e0deee1576dfd68afc82cd1
SSDEEP

768:bYYbaXlUrLcw2RcAr0iGUVM1ImbqnYjDE0OTDWgHoAZ:ulpbAkVgFpE0eDBo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4548cb4f1f5791eb4a04ce8e0af67d13

Files

4548cb4f1f5791eb4a04ce8e0af67d13
.exe windows:4 windows x86 arch:x86

503956e4b41537adb4684826ffab284d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadContext
ContinueDebugEvent
CreateFileA
CreateThread
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetThreadContext
GetVersionExA
IsDebuggerPresent
ReadFile
CloseHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtect
WaitForDebugEvent
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE