4e0218a1827406695cdbd4cb9bc629c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e0218a1827406695cdbd4cb9bc629c6
Size

33KB
MD5

4e0218a1827406695cdbd4cb9bc629c6
SHA1

cb3f5494ca1389841ad31659bd25adb83e4d1220
SHA256

ce34da62ce41fb902650d8b5f7d72efcfef404fceda5c7beacaf7d3096b09cda
SHA512

f0a03d077df95301b616deff9ef65338c6638dc1a3952ff7bfc7368659e2591a0ef2d21d2596d18c7aa24926dc630905bc119221660add65be68228c6153d5d7
SSDEEP

768:xwNnMGWXgfXgSdG6WYcn4bfbLkHrgEfG4gBUhhB:InMGWXYwSdz/c4bMHrgjUhr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e0218a1827406695cdbd4cb9bc629c6

Files

4e0218a1827406695cdbd4cb9bc629c6
.exe windows:4 windows x86 arch:x86

7475697cf1dea9b402f23a6bfa833be4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ