4926e59a8f6cc2f7127e4d8b6a54c196 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4926e59a8f6cc2f7127e4d8b6a54c196
Size

16KB
MD5

4926e59a8f6cc2f7127e4d8b6a54c196
SHA1

05119735edf75aaea69b9348a525af2f7308ffa3
SHA256

b49b81f3b68987f23158657d03f59c770c5929258b16dea9bb1cbac6ee7fb07c
SHA512

f612afbd472c48333145c7947a6faa8042e894638107dcffc3dc3271de7ea730fc2121e845a2f0b62d196303bf9705b2bfd5cb93f15b547e28b2c5e2f181d281
SSDEEP

192:yXYq+fqyn/oRyOn9oOO4G1AFc1yIl+r6IvkBM1VP0673:yn+fqyn/oRHmR1GKH2vkBoV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4926e59a8f6cc2f7127e4d8b6a54c196

Files

4926e59a8f6cc2f7127e4d8b6a54c196
.exe windows:4 windows x86 arch:x86

06ac5006571f45f4fe48af3b0111b8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetProcAddress
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ