4bfbebbc188e38fe1b3ca7abd7685c74 | Triage

Sharing

General

Target

4bfbebbc188e38fe1b3ca7abd7685c74
Size

132KB
MD5

4bfbebbc188e38fe1b3ca7abd7685c74
SHA1

2cf3472462fcda446db977cef9740f4f55315d7d
SHA256

ba15a9ded2f7ac4083b68414adfd8fb3233027e9628ed01dd4dc91cd98a3e2f3
SHA512

19bdbff85c7e4fe59836123f0739b0175172b022e0d14ffb296b60222d8f355c1afa90042f4501f67070a591a556dcf5c725ccd633fbd4239aa457ec1c39e326
SSDEEP

3072:RTih3bvZwZGia3QuSk23l3ovC/IWeGG0w6:Zih3dwZPagY23l/gWDG0w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bfbebbc188e38fe1b3ca7abd7685c74

Files

4bfbebbc188e38fe1b3ca7abd7685c74
.exe windows:4 windows x86 arch:x86

ae8b412def58523afa3aa23360702036

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterWaitForInputIdle
LocalShrink
LocalFileTimeToFileTime
CreateConsoleScreenBuffer
IsValidCodePage
GetCalendarInfoA
OpenMutexA
GetAtomNameA
MulDiv
IsBadHugeWritePtr
SetVolumeLabelA
GetCommandLineA
ExitProcess
GetStartupInfoA
SetPriorityClass
RegisterConsoleVDM
FoldStringA
FindFirstFileExA
GetThreadSelectorEntry
SetMailslotInfo
GetLocalTime
RegisterWaitForSingleObjectEx
RegisterWowExec
VirtualFreeEx
OpenWaitableTimerA
GetConsoleDisplayMode
DuplicateHandle

Sections

ATSEC0
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ATSEC1
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ATSEC2
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ