4b731e83c6c3b883c12479d2fcb19558 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b731e83c6c3b883c12479d2fcb19558
Size

142KB
MD5

4b731e83c6c3b883c12479d2fcb19558
SHA1

79ad8ddc8c71fada073ac9acdaac7aad729226fe
SHA256

cff9b89f1f7faacec13c2d67756657009b2d932a6250aa76e3290f4aa16ac9a8
SHA512

6491b99feaf0bc4e6cf000a66d178f94bfc7ddea5bb54a8ec1996725e7036cab26d1aa08418be3a3eab2edb24c948d0ed7f477f717609055a5aae45a1187f7c7
SSDEEP

1536:KF9wz0UJp/hKPzjoewYZgMJRPDmcMY9JDj5kIIybR34M+uvLaju00MWXtuO/AtJ:K4wIhh4zjkKRPCXaqS+iHVs4+y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b731e83c6c3b883c12479d2fcb19558

Files

4b731e83c6c3b883c12479d2fcb19558
.exe windows:4 windows x86 arch:x86

28318193b3a83aca539941e0b5ea951e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
VirtualAlloc
GlobalFlags
DeleteFileW
EndUpdateResourceW
VirtualProtect
ExitProcess
ExitThread
GetAtomNameW
GetDateFormatW
GetModuleHandleW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ