4dccb76be3a9b3fb25e1c7471b91e929 | Triage

Sharing

General

Target

4dccb76be3a9b3fb25e1c7471b91e929
Size

16KB
MD5

4dccb76be3a9b3fb25e1c7471b91e929
SHA1

4c9bf305ae5380f3d0e2b61a63e1f9eaff57e9da
SHA256

8701e705a5a990b67708ce33604a95d8c8f7d8f6e55215a7d49aa661a712c4d8
SHA512

e58e9d5f2bc7eee8e288ae706d5cd7e3fba18a2d97af8e58eb808c237c344ba392a311d692f83148ea6db26e80b466cfd4d676c4a93a7d48af5ac470f731abc5
SSDEEP

192:n2gO+DS5hkxrcjvg5QW0x8f+bK5ugoW5pV701toYrGaEwhah+/6M83:ROMxrcjbFx82lgoWBAQIGa8h+/6MG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dccb76be3a9b3fb25e1c7471b91e929

Files

4dccb76be3a9b3fb25e1c7471b91e929
.exe windows:1 windows x86 arch:x86

84f98c8780ea46712083e7107b93101b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
FindFirstFileA
ExitProcess
WriteConsoleA
WaitForSingleObject
CopyFileA
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
WriteFile
CloseHandle
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetVersion
Sleep

ole32

CoInitialize
CoCreateInstance

advapi32

RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA

shell32

ShellExecuteA

Sections

CODE
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE