4c64b7879c9f720a23186738337d4d54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c64b7879c9f720a23186738337d4d54
Size

25KB
MD5

4c64b7879c9f720a23186738337d4d54
SHA1

f40b739b770d62ddeedbe3730d5a81198e3bd8d4
SHA256

ee99120f6e07318aa9428d49e2b766582ec89324a30eddfae88896767323af0a
SHA512

a974efee21aab812fc43be99c0490962ea83056aaca610e8aeb92260f58b86c3f6fbc2249ade3c161cfe4de23c91e013844d75ba9280e2b2ae210ea80748fae0
SSDEEP

768:PxN4AkzWZaHvSoNwyQRIFa4cuCLh5TObG:PD4ATZabNmIY4cDMS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c64b7879c9f720a23186738337d4d54

Files

4c64b7879c9f720a23186738337d4d54
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE