4c5be6597a1ee1eb8b579548551a53ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c5be6597a1ee1eb8b579548551a53ea
Size

84KB
MD5

4c5be6597a1ee1eb8b579548551a53ea
SHA1

1eaa2d3c7a7830c55e94266b5035ac017a738e82
SHA256

24bceb5746ddf5cd637811112a1fc7d02ce9f7d0c4b1d24ecd828aecd13d2952
SHA512

2ab6a9acaa956628f36eb374e6982e74c8b81b1ae64f6eccadfe40b5be24fc08b3692a04401c8be0d7e703952fdde1df29aceeaa937d4f34154c3f5561c5006a
SSDEEP

1536:BPBRzy/HRbPshe1TqpNnjq/XgS3z25mDuAZL3D5wCtUPdbcl:TdCx7sY1+pZCXg424aAJ3DKlPdbg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c5be6597a1ee1eb8b579548551a53ea

Files

4c5be6597a1ee1eb8b579548551a53ea
.exe windows:4 windows x86 arch:x86

94890e9ec16a217a713ac391489436f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

rand
srand
time
_write
_open
??2@YAPAXI@Z
fclose
fputc
fgetc
fread
fseek
fopen
_read
_exit
_close
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncpy
sprintf
free
_lseek
_XcptFilter
malloc

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ