4d5b53c2f6f8088326d7a14def17fcd5

General

Target

4d5b53c2f6f8088326d7a14def17fcd5
Size

114KB
MD5

4d5b53c2f6f8088326d7a14def17fcd5
SHA1

74c68d9905d1f87029433c15a81d0c041cb364b9
SHA256

6adcd9523fb2e6c6928be8a6d354c408f734b2130b6f30c542df99c521bd70aa
SHA512

977926b5669814888a5e300685eb503531784e6a03190386793779f4dea5e4024ed05d3a3c6a7183d5e89644192d5caa92f2766db2a848893bd586d6329e5beb
SSDEEP

3072:evt+PRdrUFI5Vs7PYHe9wEfyaDYNLVFSZw/FN:E0PRdrUu27Pl9wEfyoY3FIWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d5b53c2f6f8088326d7a14def17fcd5

Files

4d5b53c2f6f8088326d7a14def17fcd5
.exe windows:4 windows x86 arch:x86

1930ab255d0048df401f7bba1309901e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateFiber
CreateWaitableTimerA
ExitProcess
FindAtomA
FindCloseChangeNotification
GetAtomNameA
GetCommandLineA
GetFileSize
GetModuleHandleA
GetPrivateProfileSectionA
GetProcAddress
GetStartupInfoA
GetSystemDirectoryA
InitAtomTable
IsBadCodePtr
LoadResource
LocalFlags
LocalHandle
LockResource
MoveFileExA
OpenEventA
OpenMutexA
OpenProcess
PurgeComm
ReadFile
ResumeThread
SearchPathA
SetFileTime
SetUnhandledExceptionFilter
SizeofResource
WaitForMultipleObjects

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
fseek
malloc
memset
puts
rewind
signal
time

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1930ab255d0048df401f7bba1309901e

Headers

File Characteristics

Imports

kernel32

msvcrt

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 105KB - Virtual size: 105KB

.rdata Size: 512B - Virtual size: 224B

.bss Size: - Virtual size: 368B

.idata Size: 2KB - Virtual size: 1KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 105KB - Virtual size: 105KB

.rdata
Size: 512B - Virtual size: 224B

.bss
Size: - Virtual size: 368B

.idata
Size: 2KB - Virtual size: 1KB