4ceb85aa1de23b854622c218d5badb70 | Triage

Sharing

General

Target

4ceb85aa1de23b854622c218d5badb70
Size

16KB
MD5

4ceb85aa1de23b854622c218d5badb70
SHA1

8f6dea74b31382be6d614954ab046b5cdf464d59
SHA256

0d1fb41945d815c40806131a8ab92af79b8d05d5b8b55430344246531924c179
SHA512

007283cb33cbde696a05a57aad6aa632c91e2854abdc565b9fbe36231a6b03c0b064e58b7486cef616c13344ccfc11d8180c847a629ad50b20f19ab96efca780
SSDEEP

384:yp2n0Oo9IGM/yPUHUwqFfG6xkf6u13EF6U:y20OqP9PUHg3+/1UF6U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ceb85aa1de23b854622c218d5badb70

Files

4ceb85aa1de23b854622c218d5badb70
.exe windows:4 windows x86 arch:x86

6d84fd323d920e436381375d445bbeda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCurrentProcess
GetLastError
GetProcAddress
GetVersion
LoadLibraryA
LoadResource
Sleep
VirtualAlloc
VirtualFree

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ