4e8b52af79a5065550e4f98f4c6a4b0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e8b52af79a5065550e4f98f4c6a4b0c
Size

76KB
MD5

4e8b52af79a5065550e4f98f4c6a4b0c
SHA1

101cec6524bb7037ee5ecb8d267fcf50cfbd2fbf
SHA256

3e96230c282853ed149084ac6ba804b76183d41a6637252c4e0d4096a25d0b06
SHA512

9321e7060c3596d2753df9c3ef4c79385e20ea46fba3d786e47c3eec87c8bad075069c1d5810e9a369c6bbb1e82d5290a276501d90bb33f8c8c528aceef52b36
SSDEEP

1536:zv3rIfCE6n7+MobmP1Rrp6fAYAAiAFVgn+DeAnipJyvpjVrs2ryrd1vUQuq6:7MR67Ysn8OAJ7gn+ySiXyvHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e8b52af79a5065550e4f98f4c6a4b0c

Files

4e8b52af79a5065550e4f98f4c6a4b0c
.exe windows:4 windows x86 arch:x86

f755230c0416b316ee65ef6e547b44e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
IsProcessorFeaturePresent
GetCurrentProcess
GetCurrencyFormatW
GetExitCodeThread
FreeEnvironmentStringsW
TryEnterCriticalSection
SystemTimeToFileTime
SetVDMCurrentDirectories
HeapReAlloc

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE