4bb54ef12b1684f67499aba86cd9e6fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bb54ef12b1684f67499aba86cd9e6fe
Size

56KB
MD5

4bb54ef12b1684f67499aba86cd9e6fe
SHA1

7f23622ddeeb24a51ced853c1518955ce282a42b
SHA256

51395db8f43af327b164e37e9661a7b0b179b2433884e102cc342827bf205530
SHA512

759556ffb0d4e1944a7e889845b4b0b3609d0fa3fc9037531e03d5791a219f1d9cfb7427b5ff56113517000742ccedc8663c88e7e308f67f442a1a01b82dea28
SSDEEP

1536:j2DF5s5SwOjYYZKB/F5f8D5F3yF4Ye9zp8zqwDNg:6DnLYeKpQrcqGqwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bb54ef12b1684f67499aba86cd9e6fe

Files

4bb54ef12b1684f67499aba86cd9e6fe
.exe windows:4 windows x86 arch:x86

6754bbb055a0a33b9c920eb6629dbf04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCharType
GetTapePosition
InterlockedFlushSList
CreateSocketHandle
EnumDateFormatsExW
SearchPathW
OpenProcess
FindFirstVolumeW
CreateFileMappingA
ExitVDM
ReadConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE