4a5627024710f08bc8f62033e6414221 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a5627024710f08bc8f62033e6414221
Size

412KB
MD5

4a5627024710f08bc8f62033e6414221
SHA1

7c4085557816e40c0a95949e093562460e7f8652
SHA256

6e828d82cc43dbfbcebc72c6bfa079cbf6da3c3f7fd917d6ba257bda0b011d82
SHA512

1e329f5460f9e8249d93425ce4218454c5e3b625200c41474cb7f85e5561c0784ee5d490a25bc73510d6ef510ddda74c209f75c0958c24e8f8499c1ad572386e
SSDEEP

6144:uwdlYcZu3veqrqAcRijtpIYvolrl9g+ymzOLPrnOKIgkKUM/CoFGR34eTmu0:uTvFRpIDvv1CTLOLvqCgCj6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a5627024710f08bc8f62033e6414221

Files

4a5627024710f08bc8f62033e6414221
.exe windows:4 windows x86 arch:x86

1604973158cdc473d63353ef53e65724

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
lstrcatA
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetLastError
SetLastError
CloseHandle
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE