4859f304058c3620f5a2ab0a94fc60de | Triage

Sharing

General

Target

4859f304058c3620f5a2ab0a94fc60de
Size

69KB
MD5

4859f304058c3620f5a2ab0a94fc60de
SHA1

06910ff93075e2eedd0234aac76107f2ec044518
SHA256

180db850e4b518bfbb14b7cb55a4c379de8976f3f4bcafb822000075b0cd23d8
SHA512

ee2932a49b7168bcbda802fe3fcb1d3f3f70c772d296a35a54861d8597a1d5601ee5303c4f12e6b30a63be73895d6cb82c801e4cf979ba79bfecd3078625a8c4
SSDEEP

1536:zj8tkU3Qe+elpOqBrAju1pgdyPeaHRaVJ9SBBpS:z7s5kjW+dyP+VOpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4859f304058c3620f5a2ab0a94fc60de

Files

4859f304058c3620f5a2ab0a94fc60de
.exe windows:4 windows x86 arch:x86

c8f468f0ff692b97e5d3e75acb48062b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE