4ba2b6ecfffe86bd711a97ea4e8676b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba2b6ecfffe86bd711a97ea4e8676b0
Size

1.3MB
MD5

4ba2b6ecfffe86bd711a97ea4e8676b0
SHA1

1d4eab3016b8fb68c67cc15fbb939f2498194cd7
SHA256

e381113044e43063b4ce8227c3afe928fcb4cc22790ad0e0f7df610945412390
SHA512

bb0b6e776a3ce871520eed923a2f8fc9583f136fdd5cccf4dd1766340e19a96dc43c171c4c3f70d807481807dd838b4a457376a9181c36db163a327dbeb4268d
SSDEEP

24576:o1p2KLlboJw2xudC2Ehbwrrkegrm5PalBTZLfUm769tOifpADhspOL0w4U:gpbLlboO2uQ2Eh83caGElAqEL4U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ba2b6ecfffe86bd711a97ea4e8676b0

Files

4ba2b6ecfffe86bd711a97ea4e8676b0
.exe windows:4 windows x86 arch:x86

28a4da6706f35a152fc1bab7ce969bfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetSystemMetrics

kernel32

VirtualProtect
GetProcAddress
ExitProcess
LoadLibraryA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ