4b7304e37be10fdbb034cde3992952d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b7304e37be10fdbb034cde3992952d0
Size

158KB
MD5

4b7304e37be10fdbb034cde3992952d0
SHA1

671c6c58c2973c7b9077993b82a7c389e74e7edf
SHA256

57ddb6876ac518482251c32e2753762cb6e9c6139f97dfc6044c0e6592d3e2e1
SHA512

2ecc374b936dde37a1fe26da820cb1eacd57e078cfbeb36bf960b8ec9178e95ddc04b62a2d3fcbe405fca2db16785674000f105e717279c25bbca6c82747568b
SSDEEP

3072:YPo5fYlcck/zEgkiJ0U/yoSU6YGRv1pnSt+5yheZ6JYQmDU:YPZlxUh9LJSbRv1RXyhdYN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b7304e37be10fdbb034cde3992952d0

Files

4b7304e37be10fdbb034cde3992952d0
.exe windows:4 windows x86 arch:x86

331e29891373ee4f9993225cc054e555

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CreateFileA
CreateMutexA
OpenMutexA
GetFileSize
ReadFile
GetModuleFileNameA
CloseHandle
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

realloc
memset
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ