4e4ddd6ae769a38739a58c543989d1c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e4ddd6ae769a38739a58c543989d1c3
Size

299KB
MD5

4e4ddd6ae769a38739a58c543989d1c3
SHA1

74fb56015a1df49ec3f88ba4c44ddae8be884aef
SHA256

c613230e3f154f427ea6657f8bb24d45a8cc79c79d4b19668314656df66d0120
SHA512

f2dc4371f3e02c27a1a9968bab333d77ef0c7b283430d970459216351f3ebd5cb089b1a5825fe941b2da5eadf5b45ab09b2f95aec211ea1bea0db994cf511f1b
SSDEEP

6144:E9SC+saLThdTCKWYZuucsLucA/qEIjkMcap:7CkTTxvuc0Inco

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e4ddd6ae769a38739a58c543989d1c3

Files

4e4ddd6ae769a38739a58c543989d1c3
.exe windows:4 windows x86 arch:x86

d4ff4e9520d2b9d618be12fecec0c0ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA

lz32

LZCopy
LZOpenFileA
LZClose

user32

MessageBoxA

Sections

.
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 296KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ