4676fb0d7dabf10018afdfaed498fec5

Sharing

Copy URL Twitter E-mail

General

Target

4676fb0d7dabf10018afdfaed498fec5
Size

1.5MB
MD5

4676fb0d7dabf10018afdfaed498fec5
SHA1

bc89efd69f10cbc6346ebd69894f296d07d19141
SHA256

042b83af27f3de12bf2a9224db06de3bb2e32b3f9d4ce06efb540db133fa4f0d
SHA512

50d435ba4dd91e61885c3fc038989c9ca01c50a6758106a123497ef27301db118308844a494934d4554382a9c8ed26ef79827a416ae4e5a5a1846ab1fd2bf0ef
SSDEEP

24576:cqso7ZBz9e9t+LRRDjBLVyglK4WpkjvhAwoJfS+YsmYFvB2hyLmzxYlroFLmh:cqnUK3wg44WQpvwfS+YHYFvBN7rwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4676fb0d7dabf10018afdfaed498fec5

Files

4676fb0d7dabf10018afdfaed498fec5
.exe windows:4 windows x86 arch:x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

CODE
Size: - Virtual size: 964KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.delete
Size: 512B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pklstb
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.relo2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

Imports

kernel32

user32

Sections

CODE Size: - Virtual size: 964KB

DATA Size: - Virtual size: 12KB

BSS Size: - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 12KB

.tls Size: - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 4KB

.delete Size: 512B - Virtual size: 64KB

.rsrc Size: 14KB - Virtual size: 14.1MB

.pklstb Size: 1.5MB - Virtual size: 1.5MB

.relo2 Size: 512B - Virtual size: 4KB

Size: 8KB - Virtual size: 12KB

CODE
Size: - Virtual size: 964KB

DATA
Size: - Virtual size: 12KB

BSS
Size: - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 12KB

.tls
Size: - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 4KB

.delete
Size: 512B - Virtual size: 64KB

.rsrc
Size: 14KB - Virtual size: 14.1MB

.pklstb
Size: 1.5MB - Virtual size: 1.5MB

.relo2
Size: 512B - Virtual size: 4KB