4e818d5acfbc4d544f75090659ca3935 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e818d5acfbc4d544f75090659ca3935
Size

48KB
MD5

4e818d5acfbc4d544f75090659ca3935
SHA1

c214dd77490ae92bf23011565ebe297d3dbb14e6
SHA256

9baa0ef91ad581bc76267e223cd059614c80f6b963a275f894d4b10ee2e969ae
SHA512

7e17ef64cbe8e40751424bfc6bddcf691604d3e9257756b70d2c3410a376a9824adaaa7fde2d493b463b109d5ccf47fb7a2ba2bf6fa21744e3b376b2100e8527
SSDEEP

768:0YpmEJGsXQOT+OExNAyjoQ/vjVaq9oFz8rKwVlEduH:NDAOVExayjoY0Jz8rKwz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e818d5acfbc4d544f75090659ca3935

Files

4e818d5acfbc4d544f75090659ca3935
.exe windows:4 windows x86 arch:x86

b76bb977464656ae69eeee842eee33b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrlenA
Sleep
GetModuleFileNameA
GlobalAlloc

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ