b4134704a0d979b5cbe3741df7263489[.]exe | Triage

Sharing

General

Target

b4134704a0d979b5cbe3741df7263489.exe
Size

1.9MB
MD5

b4134704a0d979b5cbe3741df7263489
SHA1

2d3ace1c9a6f0cdf36b95ce1c16548078d748e99
SHA256

31a5173a0c598156190dea577b35a3e049ef751dcb18741c665d956014e61d18
SHA512

b3ee5c43e614f96b53ae275824fe64940be11fd9617c5bdd7f515c3345b840e8a8d5abe2b3fa7d64c6bdcd632fef86665d7a957355bd89e2dcfef1a9130ea3d6
SSDEEP

24576:BG2ae80SKaSaa222aue0ae8e0eaaaaaaaaam22aaag:B4ve1ef

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4134704a0d979b5cbe3741df7263489.exe

Files

b4134704a0d979b5cbe3741df7263489.exe
.exe windows:1 windows x86 arch:x86

8fb490aacc7f5ac566dff4d7a2b7cb7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
GetCurrentProcessId
GetTickCount
TerminateProcess

user32

EnumWindowStationsA
FindWindowA
GetClassInfoExA

gdi32

GetTextFaceA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ