4892c326bbcae316f12812c64d2fff1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4892c326bbcae316f12812c64d2fff1f
Size

129KB
MD5

4892c326bbcae316f12812c64d2fff1f
SHA1

9f483cace1222573f873886f02353d2879a686f0
SHA256

7dfe8bbf077b215386404a2cb8e86bf5226ea7743dd9b6295dc1d69a9815c288
SHA512

46c7c61ef0a51ffb3f731a945e173e019f3d1dfa7fd7bea3e028ead6755d7f38ed510c9f4be31d5ab4ecdd0caaf110f4c7f7270fba2089c66ae293b4ae809a99
SSDEEP

3072:Mtrk543lx1yOHI2PClwhk2cXWYPFUaKyVxUTM8XcsFh9:Mtrkklx1yr2PClwhXcXDJKUUM8Tj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4892c326bbcae316f12812c64d2fff1f

Files

4892c326bbcae316f12812c64d2fff1f
.exe windows:5 windows x86 arch:x86

fd7a8cf5bc28344eeb06c6f99f664893

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
lstrlenA
HeapAlloc
GetTickCount
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess

shell32

SHGetFileInfoA

ole32

CoInitialize
CoCreateInstance

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ