4c9018f9b8de85bf5cc8d0a74345a794 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9018f9b8de85bf5cc8d0a74345a794
Size

173KB
MD5

4c9018f9b8de85bf5cc8d0a74345a794
SHA1

5fceab8e5cbcfce373a0b1e615bff482e514fe48
SHA256

754236908f7e2fc1aaf3ac65e99096b0fa5eb90c54410a53cac45d06864243bc
SHA512

14b087a5c5382da8dc3e4c80e32587cecbaba9e56d44c447f771c8dc81a99895503f15382582d9e94cd07cca1c721ef5a36fc6c69851f87cdc4922250c31f461
SSDEEP

3072:g1ZFj37wrbfP0Qp3KezI1Z2rSxM8FdOcBnQ0ctMfu1aXYe5AvRqExHXw66O:g1/D7wPP0eKj1SSWWnpctMP/A5qE9w6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9018f9b8de85bf5cc8d0a74345a794

Files

4c9018f9b8de85bf5cc8d0a74345a794
.exe windows:5 windows x86 arch:x86

68c2c25e2defa9a93f8b3d5440bae923

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixel

shlwapi

ord29
PathCompactPathExW

kernel32

lstrcmpiW
GetModuleHandleW

Exports

Exports

?BingoGetOut@!PEH_KK:X

Sections

.text
Size: 24KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ