4b5c9af6dc4d942c0fc1504263dcb362 | Triage

Sharing

General

Target

4b5c9af6dc4d942c0fc1504263dcb362
Size

3KB
MD5

4b5c9af6dc4d942c0fc1504263dcb362
SHA1

5bc26103c2b7566f0aaa934455d22d8bdbfb3c92
SHA256

4ce691f53a5140b4e906391f2459508f6a3549fb3b43630aac53a45e9d07f768
SHA512

f5d0e82800462952d93408f54514e22de0f4b161bfc1b046bc6b4bd7bf20d31209d1a6707d13e02ecf8202850937cf8c3e03689410f1548af250e46ce5f58c56

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b5c9af6dc4d942c0fc1504263dcb362

Files

4b5c9af6dc4d942c0fc1504263dcb362
.exe windows:4 windows x86 arch:x86

6cec0e134b908ee2de0fb9f8522c984a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
sprintf
gets
printf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
fgets
_popen
_pclose
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
_adjust_fdiv
_stricmp

user32

wsprintfA

mpr

WNetCancelConnection2A

Sections

.text
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE