4e8ec168e16d742087405f86067b5107 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e8ec168e16d742087405f86067b5107
Size

113KB
MD5

4e8ec168e16d742087405f86067b5107
SHA1

f68cad41fc64bbe3c1220dfc12d9232d42b40e4c
SHA256

7c1370907c764b08bc0ce2e46d55603c8be13047672015382697d1382f97b391
SHA512

23d531ba64337fc63b6e7346aa7acbd637e074ce9050a9a57635db778032267c7dc880aedc093cb03ef2e839e6c64f88b2f2785280a2cc9d9fd328f6d9c29fc0
SSDEEP

3072:V9um06KZDo5j+C7FeTfzZcbmtUDPiu2uNIK:VEmJ+IFeTE8ud

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e8ec168e16d742087405f86067b5107

Files

4e8ec168e16d742087405f86067b5107
.exe windows:4 windows x86 arch:x86

40e5a4f6345d0da73b267e0654520ce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
GetProfileSectionA
VerLanguageNameA
WaitForMultipleObjectsEx
FindFirstFileA
CreateTapePartition
CreateMutexA
GetStartupInfoA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ