4e7b1b0c1aa116162d615bc18ee0e796 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e7b1b0c1aa116162d615bc18ee0e796
Size

112KB
MD5

4e7b1b0c1aa116162d615bc18ee0e796
SHA1

0f1a74e0f62ccbe38aa21ccb78e15dda0e709ffe
SHA256

44cf2f668889f980f6567a0500f424a83a3e002206dbeadbdd143f7d00d54b8a
SHA512

488b7dad538e7ad977c42e4f6855def3e25d5ed40646d50bd3d48fd103efcb6d0f9b6b8150a7f0f623f9f438d7fcb2f3e7820ba69fa10e688f1364ac4414af6f
SSDEEP

1536:88Bg0z6IdSqVnhimXrmnFFnvZv8yctfT463LSz5Bju6WEfT3ydK5mtI198vRscwE:zP1XAmyC/uNBj+E2odPSRrht

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e7b1b0c1aa116162d615bc18ee0e796

Files

4e7b1b0c1aa116162d615bc18ee0e796
.exe windows:4 windows x86 arch:x86

c8afd0fda879c604b6eaaeba6dc64589

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

GetDesktopWindow

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xubawev
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE