4de2a641d86ae7bd647024f01154f273 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4de2a641d86ae7bd647024f01154f273
Size

56KB
MD5

4de2a641d86ae7bd647024f01154f273
SHA1

efaac6fd1fbcbea5f07d1d47b2542f1cff49b3b3
SHA256

6873a82c6fd4c2752b37a7fa18491318780c7102257267474f21fa0d2519fd32
SHA512

05121924c82a60ebbc6ecdc7a34cef81cdeb429e522750c7bb06666541dac19a9a5fd5cebbe21eaaa134ad3792b0e7e5b5835846746c64b6a234fdfc00fba80d
SSDEEP

768:d+Wm9DR2sM8u9mwosTXTmrt6hp71/U3a5+zvSIEqNC0K02/R/4SCiotlO4DoQHgX:YWm9YyaTX6o18iRZ/4SCiQlrDRAqXD2P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4de2a641d86ae7bd647024f01154f273

Files

4de2a641d86ae7bd647024f01154f273
.exe windows:4 windows x86 arch:x86

c838de001836ae52462f5688d20835b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCPGlobal
SetConsoleCP
LZSeek
DosDateTimeToFileTime
CreateToolhelp32Snapshot
IsProcessInJob
ReadFileScatter
GlobalUnWire
EnumTimeFormatsW
NlsConvertIntegerToString
ReadConsoleInputExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE