4963e14a4e0b12ed826c01fe9f311525 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4963e14a4e0b12ed826c01fe9f311525
Size

130KB
MD5

4963e14a4e0b12ed826c01fe9f311525
SHA1

8afcfb874a1fdc9161c95aa15d3017509ad76108
SHA256

87792cec7c367fa98556bf0130cc2292d1c9fe79ca2ded8c5f337738d18c8ee0
SHA512

0d67ba3de6fc0f4b270d116dd7457f9e37d8d1530c2c45979e452a9b1e1f52eece5f45908585e9fffbff6ebb21e6bed9d3d8ff0c13aa7bd29d340cf424a070a4
SSDEEP

3072:I1YaJKAT8gL338EbsBOCFfLbU5M52WG+G7x860ZfihE05ZLr+4wAnM9ln:I1tJPwgLhgsGmM5ftG7F4awln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4963e14a4e0b12ed826c01fe9f311525

Files

4963e14a4e0b12ed826c01fe9f311525
.exe windows:4 windows x86 arch:x86

a1f3c85938d839f223b9d794fc14cbfa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalFree
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrlenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE