4c168a5d7c51cf67b3dea232516df966 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c168a5d7c51cf67b3dea232516df966
Size

61KB
MD5

4c168a5d7c51cf67b3dea232516df966
SHA1

f332f3eea5445fb7be353ab43801ad520e58e7ca
SHA256

89317c832dbbed5fa129847198d9b53b385527ce217bdff1afd7e268aa237788
SHA512

2ebce3355a24756b928ab901f2a4bed023b8bd68b6be8d7b0c5e89b5dda795b34e79fea9c2fe8d59a8f683c3507529319b79063f4a6f65a02965ecdb3460f361
SSDEEP

1536:gm7wjsVTJ+p3JrkGLawHE/E2j+ENmYJgU9BNtVhX4hFjxB:b+sVT45mn/bjnNqU9B5hQFj/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c168a5d7c51cf67b3dea232516df966

Files

4c168a5d7c51cf67b3dea232516df966
.exe windows:4 windows x86 arch:x86

22423eb3058af0ae47f08ce450d03f43

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 56KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oxczTVm0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pep
Size: 63B - Virtual size: 63B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE