4d2f521ec1d855accff4ec954b8f25ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d2f521ec1d855accff4ec954b8f25ef
Size

53KB
MD5

4d2f521ec1d855accff4ec954b8f25ef
SHA1

8ea69bf6c35c830b84667f41e7c942d63d695255
SHA256

3f27e3e9fc00da182a3f9e5358656a98d443e43c3598dde7c019b343afeac648
SHA512

c55e547566b3f3f7be1239a74efd044c1384a93551a918a03efa2607bd234fa6c162f4b4eb07485fede745a43f9828a895b208a8c34204394380715e47d0117b
SSDEEP

1536:dyqVH/0dZ0MVDaQErgEiNvYUzrWgPiDboHoydsGT+:dXVHM/VDaQ6jipYUzroAHxdsW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d2f521ec1d855accff4ec954b8f25ef

Files

4d2f521ec1d855accff4ec954b8f25ef
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ