4954af22cc2996dc28f12aa827ec8440 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4954af22cc2996dc28f12aa827ec8440
Size

14KB
MD5

4954af22cc2996dc28f12aa827ec8440
SHA1

e158dd5621c7da27df459e0ec345fb7077149b76
SHA256

f9a2fb2b813d160eef20827707b4002f738ad927ba5989c260a19c133caa363f
SHA512

3838aa60f4f6d71f5f21f43eb64220ac6a6e9e175c81237d14e4d5eef8e59a6f692de90baa5ba407a61e0af6da940111df33d7da8db07f24d4d1a84e39fd86a7
SSDEEP

384:pnHki8u7SU5cEV8sjJM0iUMlMiqHElZzWmxxSl:t72Emsa0iRiiqHEfXT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4954af22cc2996dc28f12aa827ec8440

Files

4954af22cc2996dc28f12aa827ec8440
.exe windows:4 windows x86 arch:x86

40b3c6a8550e5dc8a6af60d9a9fab482

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetTempPathA
CopyFileA
SetCurrentDirectoryA
SetUnhandledExceptionFilter

msvcrt

_strcmpi
_cexit
_fileno
_fmode
_fpreset
_iob
_setmode
__getmainargs
atexit
exit
fprintf
__p__environ
signal
strcat
strcmp
__set_app_type

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE