4d7e82471a7084b60a054061d043f7c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d7e82471a7084b60a054061d043f7c7
Size

64KB
MD5

4d7e82471a7084b60a054061d043f7c7
SHA1

37021908e26a6d11a3e3997dc823b1f8be40353d
SHA256

9b9a988f9485537ba07b9e46400711b005272860478374bc45cb7b8fca88bf2d
SHA512

957c935c72400a4263679fd22c3912f4875c14483d908b67c645db8728fc93b6c9a6c1cd06e2d78496a42412240835e1a0f32b8b207c3e0052d034ddf538fd80
SSDEEP

1536:2xgcNNEBmxT5XYgQijmsjvMJy5C6LMf0hS4kMEY8jzT7xKwSpDzTL3:urdXQ9sd3nS4kcOzfxupPTz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d7e82471a7084b60a054061d043f7c7

Files

4d7e82471a7084b60a054061d043f7c7
.exe windows:4 windows x86 arch:x86

d0163a8e66ab142b942ee8c9fc18c877

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLCID
GetSystemDefaultLCID
GlobalAlloc
GlobalFree
GetDriveTypeA
GlobalLock
VirtualAllocEx

tapi32

lineRemoveFromConference

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ