4e5bad5de25dd0c1059df3b4f4b55502 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e5bad5de25dd0c1059df3b4f4b55502
Size

41KB
MD5

4e5bad5de25dd0c1059df3b4f4b55502
SHA1

c125d699d6a4ff1082dad968135ec97b1f74cd59
SHA256

af59ec741bfbed3d1b3e68f3a59e38f35ea08bcbef467784d350597fb9880a16
SHA512

b1630cdaf615b8164ed1e5ec321ecadc25bddcd3ffc0e5f9cebeb8dfb290ff7661788d2d41e80e7d7f6b3779d6e4a83da6b90cdc25c276a89d7bfb294844ef41
SSDEEP

768:QC9phHBaszxQuBbABXtjjcjxf3Tmm4hrqH4O5xmS+1gzCv51m02x8:QuBamxRBGXtMjxvqm4hrk4O5xmX1ph1p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5bad5de25dd0c1059df3b4f4b55502

Files

4e5bad5de25dd0c1059df3b4f4b55502
.exe windows:1 windows x86 arch:x86

9475e0f8cae8227a94e90e2c365031c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
GetEnvironmentVariableA
GetFileSize
GetModuleFileNameA
GetShortPathNameA
GetTempPathA
ReadFile
SetFilePointer
WriteFile
lstrcatA
lstrcpyA

shell32

ShellExecuteA

user32

MessageBoxA
wsprintfA

Sections

.code
Size: 1024B - Virtual size: 1022B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE