4b370e5e022fd4513e2be7b0c96b1147 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b370e5e022fd4513e2be7b0c96b1147
Size

109KB
MD5

4b370e5e022fd4513e2be7b0c96b1147
SHA1

0afaf48392399887fa79957c6aa6d6d475eedd62
SHA256

c071f4e1e89b8e2d8260da5c1654ea8d1598ab6d410d67933d2990da20b45c81
SHA512

ec80aa2e8a0cdda7620f660277ac1b2db4aee236910df310b571dcb7891df70c0d3017c008d10cc9ea9ecae704cafd2bb466b2bc363dd83a7875f5bae4c3ad6f
SSDEEP

3072:mZJFN3KIpQBBuq2YRH1p7Yazp2ZP7W5mgUM:mZXNkXhvRAtC5EM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b370e5e022fd4513e2be7b0c96b1147

Files

4b370e5e022fd4513e2be7b0c96b1147
.exe windows:5 windows x86 arch:x86

06c4e49f50263de03a1b4b405368d657

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetVersionExA
GetTickCount
GetProcessVersion
GetCommandLineW
GetProcAddress
GetModuleHandleW
IsDebuggerPresent
GetModuleHandleA
GetStartupInfoA

shlwapi

PathGetCharTypeA

msi

ord141

msvcrt

__p__commode
_exit
_XcptFilter
_onexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ