4873d04dcb410f62cc953de119805d23 | Triage

Sharing

General

Target

4873d04dcb410f62cc953de119805d23
Size

23KB
MD5

4873d04dcb410f62cc953de119805d23
SHA1

8d71b1e687e628ef09880b894469f36790dbd82e
SHA256

62f942fe9a908f1c7a904085f0c6250831ef1e6997e595f33346beb767044a39
SHA512

9108d5ca0bb548edeca2d9aad09bc7f842c5b674844b528031c6a6daf8b6786e9085fd23014db1865ba4e0b6908cabca764f231c21c1cf2223aac9ebf55b04a2
SSDEEP

384:0evvGeJGFW/8AoWoFQ273eLXVBYkkjuv1hkNLdbaLa4CwUJuUCSFCJWe8EDEWW:dvGeJG/AgEVBxkjuv7wbaLa4PU48IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4873d04dcb410f62cc953de119805d23

Files

4873d04dcb410f62cc953de119805d23
.exe windows:4 windows x86 arch:x86

5503260410daad8f1592c235f029ad38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
DeleteFileA

user32

GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

strrchr
_stricmp
atoi
_itoa
_except_handler3

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ