4b483356876f1a305eab06aab35addd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b483356876f1a305eab06aab35addd9
Size

484KB
MD5

4b483356876f1a305eab06aab35addd9
SHA1

1d1836ba18f6124730a3c5f542bc0bd7c286e054
SHA256

2a4521fb4043853221ae8ba7f56e1bd198003d97021cfe0c0c101621908af8e0
SHA512

357d23afa8bc30cd59c393fd3a29887cdc6a91706444803e8ed7265f3e361b8776b0c67164ba3fd7c208641c3385e34d0c5f0b2fc3f79573c50f988ab91faf9a
SSDEEP

12288:AVwsSZDXx27jNRcQUDH7vF91kG4tzQqyTZJ2ICwmEp2tyeftP45Vu:6UBgaTL7vn1kG4aDZ8ICw5pgDP4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b483356876f1a305eab06aab35addd9

Files

4b483356876f1a305eab06aab35addd9
.exe windows:4 windows x86 arch:x86

88fc4559818629f79c936918159f406d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetForegroundWindow
GetMessageTime
LoadBitmapW

kernel32

CreateFileMappingW
SetLocaleInfoW
GetConsoleWindow

ntdll

RtlReleaseActivationContext

Sections

.text
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE