4a61249dc298d1fb8c24a15b5a5a779b | Triage

Sharing

General

Target

4a61249dc298d1fb8c24a15b5a5a779b
Size

30KB
MD5

4a61249dc298d1fb8c24a15b5a5a779b
SHA1

a1466a2c782f82374c65c8375c63fff03ac3ef75
SHA256

0102c3f3c3e3adf6206f8b0d1889439187e6eced02f2f8579001d99818ebffb6
SHA512

e0896412fbf0b9c346ab0c7799281341d30fcf0b45b524f8df65087c0c8b3b51c35da7a18c41aa675a7a42b541b83ca30a73caa148e5fdc15bbcebd828bb7b59
SSDEEP

48:6v+VcddgDAvH4iFbRLc27uibZJZL/Z0tz5xs7iC6uplSC2aa9OxfffffgR4ZsbXm:ZCxy0DZD7iCRd2R9OH8r7PJT4mFQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a61249dc298d1fb8c24a15b5a5a779b

Files

4a61249dc298d1fb8c24a15b5a5a779b
.exe windows:4 windows x86 arch:x86

85773a17eac8d4a521b00d2cca9b9ac3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ