4b72bdbc0b23636e4c75aa7f2cdebbfe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b72bdbc0b23636e4c75aa7f2cdebbfe
Size

76KB
MD5

4b72bdbc0b23636e4c75aa7f2cdebbfe
SHA1

cb20a962d6cfb81448d446ef2873374184cc2f3b
SHA256

d5fcb0887acc03d969eeca59d10e2faf8586bc8e5ae64cb168cb7135d14fe775
SHA512

1d8cc34efc44ea1e69de54bfbf58988dd7201769d626f17d65e047fa0ea2e54d31a0cd0f344cc22e255ae809d95a92bae3ce5c6d8981e1f9349df7f43978bbf0
SSDEEP

1536:yuwJXFgSThYrSXTylWJ81JYpAqmTHhb0o6ailJQFvD3sDlkm:yu5mhYrSFJWJYpAbgJQFvD3sJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b72bdbc0b23636e4c75aa7f2cdebbfe

Files

4b72bdbc0b23636e4c75aa7f2cdebbfe
.exe windows:4 windows x86 arch:x86

1178f89d172b5edb14a6fa0bb2aafd0b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetTempFileNameA
GetPrivateProfileStringA
GetConsoleAliasA
GetProcAddress

user32

GetMenuState
TranslateAcceleratorA
SetTimer
GetRawInputData
DrawStateA

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ