4b5408ba189db142b07f4e7a8c2831d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b5408ba189db142b07f4e7a8c2831d9
Size

119KB
MD5

4b5408ba189db142b07f4e7a8c2831d9
SHA1

915884d0117d4a9e865724f33a0feed72a2d92b7
SHA256

5fcfe19992ad3fddac4dc68a816de59900418d7b80e1015502a04431e77c9e73
SHA512

b140c2cd59916fa00607cfc9a74b5ee4ac2e6f2dddb4f64a7896318128ddc1ce8aeed30ffad21f2ae30dad81220d2f7eec5b19abd61665c9961e06597b739c26
SSDEEP

3072:N16uG7vqxRKiSvuIKX9dIqXbnhkLp4RzmQdB6ID:N16uGpvuTtdwsTeW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b5408ba189db142b07f4e7a8c2831d9

Files

4b5408ba189db142b07f4e7a8c2831d9
.exe windows:4 windows x86 arch:x86

84db8acb646b82d5f3ccc48a4cd16746

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
Heap32ListNext
FindResourceExA
GetThreadSelectorEntry
SetLocaleInfoA
ReleaseMutex
CreatePipe
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ