4b24db80d11298b9e862c5345a14acc5 | Triage

Sharing

General

Target

4b24db80d11298b9e862c5345a14acc5
Size

179KB
MD5

4b24db80d11298b9e862c5345a14acc5
SHA1

80f922ca2dd143a665865d74d09aef7918250155
SHA256

e531d575430e446be18c94052f732be5f149a8f52038d71f8b26988f73f95047
SHA512

098fb28ad18cc2e08cde33fafdfcd40a007d3b26cc60ad17f1f27242235c32e2bca17cea9cdc84b953d9df7027f4e58dd2cdf23cdaf1e794d6c7de9b53387d5f
SSDEEP

3072:CshayzeZ/mlsKH0uz5QRto4+7rk/rXGT/Zn9KEaRVyH:CsIyyluzmL9+7wrGTBc3RVyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b24db80d11298b9e862c5345a14acc5

Files

4b24db80d11298b9e862c5345a14acc5
.exe windows:5 windows x86 arch:x86

45af81b5aac180a3c6f03a7c03f9b503

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsCharAlphaNumericW
GetWindowDC
IsCharAlphaW

kernel32

GetProcessHeap

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@"H
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@"H

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 623B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ