4715d5318acba2c35c0bfe6a7de22c48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4715d5318acba2c35c0bfe6a7de22c48
Size

404KB
MD5

4715d5318acba2c35c0bfe6a7de22c48
SHA1

77f243753898707460320029215ca78ddbf8e4b3
SHA256

42f11f1b4ffb38caf99526ba3e9739ba1b91b67de685c0c646c7c23a175582cb
SHA512

dabec4cc0f68bb5ac1f7cfbf4ae6687ff56d17c7a5db172fab975b9a4c7d64eb3bb09ae81ccd5e7368adfc2e05151234a60fe9c985d57ee1a3536b45040decc9
SSDEEP

6144:a5waWCSPnZxJTUA0BIqSZao/BLYZMtxl6HkB/fq2ZLb29bc8YMbRqNu4:xa6xWA0WbEZiH/vf29rYMly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4715d5318acba2c35c0bfe6a7de22c48

Files

4715d5318acba2c35c0bfe6a7de22c48
.exe windows:4 windows x86 arch:x86

d60865e8f71486c506983b75a1a815c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
CloseHandle
SetEvent
GetModuleHandleA
GetTickCount
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

LoadIconA
LoadBitmapA

msacm32

acmDriverDetailsA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 725KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ