4cb90dcd2dcaf489f82d96ae97d96a45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cb90dcd2dcaf489f82d96ae97d96a45
Size

19KB
MD5

4cb90dcd2dcaf489f82d96ae97d96a45
SHA1

4b0a1ac320495e2b63e36dd0bb30058efbdfbdc4
SHA256

51b9abd3fa3631bac874aedd386a83df48be8437ef87f29fa201112548cb9e7c
SHA512

fef6c83315eeceec09b1d75a9e2a535333f42f5120cbe17fff9b7f070fecf7ac5bf41b014a13f1f9961e30648ee6250579b845a256bf524d6d903fb00aded891
SSDEEP

384:cBidsAi2q4gDJCQos4ygim/PGtFYm/xMkAeXr8vaE4Qt36TjKlejlsgIg:cBiXi2MJCQV4ygi0Otmm/xMkAe7iF4QI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cb90dcd2dcaf489f82d96ae97d96a45

Files

4cb90dcd2dcaf489f82d96ae97d96a45
.exe windows:4 windows x86 arch:x86

b0de3cf267771316ab6a096a51115b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryW
IsSystemResumeAutomatic
GetConsoleTitleA
GetFileAttributesA
SetConsoleKeyShortcuts
CopyFileA
LocalUnlock
SetFilePointerEx
Module32NextW
EnumResourceLanguagesA
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE