4b2d3bff999fe2b167af548843332643 | Triage

Sharing

General

Target

4b2d3bff999fe2b167af548843332643
Size

51KB
MD5

4b2d3bff999fe2b167af548843332643
SHA1

ea46a64d6a715d7d7d1b6751b88d612337aadaed
SHA256

75e769c58ba3d86011dce06c2fbc1687d705753048a2c3e90e6c47cafc5c7cf2
SHA512

33857794f1771abf2ded4d6700360b3963d085a6fce2ad28fdac3c752546641efcee4cceb23031e5d6bd98760ecc860da5d321a0cbefabf43d2489a94ec61986
SSDEEP

1536:9WMY6ILkV8Hmuh5VYROO7Yg3gmeaWi1WBGUu:9W96IcqJ3YRq5aWaWBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b2d3bff999fe2b167af548843332643

Files

4b2d3bff999fe2b167af548843332643
.exe windows:4 windows x86 arch:x86

5404ba3cdb5322e5827d0cdbe72d5863

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

user32

wsprintfA

shlwapi

StrStrA
StrChrA

advapi32

OpenServiceA
CloseServiceHandle
DeleteService
OpenSCManagerA

msvcrt

exit
_XcptFilter
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_EH_prolog
__CxxFrameHandler
memcpy
time
srand
rand
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
_acmdln

kernel32

lstrcpyA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
ReadFile
SetFilePointer
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
CloseHandle
GetFileTime
SetFileTime
lstrlenA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE