4874291183bce737e1f388844fed703e | Triage

Sharing

General

Target

4874291183bce737e1f388844fed703e
Size

55KB
MD5

4874291183bce737e1f388844fed703e
SHA1

bdb922b5967c02acf7ffacc88c6cfe4a6788e117
SHA256

49762170db147555d304acb4826d0ccd0905e525f82a9b97121437eced16c8be
SHA512

ad90635f114df1ef3f240bbd2e495f4b963f52c139a5a827e65448f58a7048156db3ae17d774316aa5caf40920643c88e88da022c69fa73dcc4cb4dfd4aefab4
SSDEEP

768:3RGPvb8CxSP9ESKIDx6zuSIg2gJE4x3kRfD09j3sTXS/IkTr6TzWYnamK+H:3RpCxSPfpxeuPg2RbO8TXRkT+PXVH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4874291183bce737e1f388844fed703e

Files

4874291183bce737e1f388844fed703e
.dll windows:4 windows x86 arch:x86

e284d5b3c73c3744c003a0781c3b7f12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcessId
GetFileInformationByHandle
GetProcessVersion
DosDateTimeToFileTime
lstrcpyn
CommConfigDialogA
InvalidateConsoleDIBits
GetCommandLineA
ExitProcess
GetStartupInfoA
CreatePipe
GlobalCompact
SetErrorMode
lstrcpyA
GlobalLock
GetThreadLocale
GetProcAddress
GetPriorityClass
ExitProcess
EnumDateFormatsExA
EnumDateFormatsA

Sections

ATSEC0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ATSEC1
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ATSEC2
Size: 47KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ