4bbc6f877f58fb4ccc754cc863e5bceb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bbc6f877f58fb4ccc754cc863e5bceb
Size

464KB
MD5

4bbc6f877f58fb4ccc754cc863e5bceb
SHA1

3b86519eec3ab6b059d41f3c205ae16971538f6d
SHA256

af748741e433b32bc231f5c5d114383d2a0b6726b42fb68c0b5b614da03c38c4
SHA512

9e44a3d5cc013a3ebc1d11908b1e9425e798fc52ac67a6de7da9ac62d355ebb25e9f07697ca93883ff54ff2e168f1d472df70aee8990cb3b4f064e23c7321aa1
SSDEEP

12288:3JLvWZ8hNXCfD+/kTPnfZRZcphvK6rf9TN9yRJf:3JbWUgLjPLmF6R1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bbc6f877f58fb4ccc754cc863e5bceb

Files

4bbc6f877f58fb4ccc754cc863e5bceb
.exe windows:4 windows x86 arch:x86

fdcc5f54154437384558df3f292ecba1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtCreateKeyedEvent
RtlCaptureStackContext

kernel32

GetVersion
GetThreadPriority
GetUserDefaultLangID

Sections

.text
Size: 459KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE