4c1268da61644e096f3949a8469f974c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c1268da61644e096f3949a8469f974c
Size

10KB
MD5

4c1268da61644e096f3949a8469f974c
SHA1

d893173d8f4f89de4e6d6630254627c2c297507e
SHA256

2c78c1c89d0af786ba7b9ccbe013692a0f98671283766bdf1a118996b2f5f28f
SHA512

736e10f2ca10a5dde53a56b61f2da5eb18ce834650df7c6a059f604acf2edd2f3ab30c468ed3208e69e059e8bd90145469e89ebfd877e1707e83d86c70b66600
SSDEEP

192:Y0+qX14/51DWHwHVwoJ7JkG6GAQP//Eqgz0dLShAA:YZqq51DWHwHDJsGAQP//EqguLBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c1268da61644e096f3949a8469f974c

Files

4c1268da61644e096f3949a8469f974c
.exe windows:4 windows x86 arch:x86

fce7809a30096dee5d325be7178490ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
ExitProcess
FindResourceA
GetModuleFileNameA
GetThreadContext
GetTickCount
LoadResource
LockResource
ReadProcessMemory
ResumeThread
SetThreadContext
SizeofResource
Sleep
VirtualAlloc
VirtualAllocEx
VirtualFree
WriteProcessMemory

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ