4eb04c93509a22234a60571b4fd101d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eb04c93509a22234a60571b4fd101d7
Size

52KB
MD5

4eb04c93509a22234a60571b4fd101d7
SHA1

6f50a4c8be3f430d959b0dc3958cddf759c83a2d
SHA256

f0178e019df6cef42290416c675f06b38c3fc49e1e509845ec207002b49fa8f4
SHA512

4ffe33145c3d7464f64b793ebd7f183735310eed6fbc522ec1ecf135d052da4b0f9b879bcc1f9e94f2057ac97a7503a0d6162e9dd9b76618c0c47c68bb6a2faa
SSDEEP

768:rKua9Cit5BLz/zTGjdR2sq+kVEv5jfD+fsWy3JeYIpOPy2P5GawyT96NP1gnUYOt:rdG5QfJq8vQfsQYwkzPYO9DrOF+rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eb04c93509a22234a60571b4fd101d7

Files

4eb04c93509a22234a60571b4fd101d7
.exe windows:4 windows x86 arch:x86

3b6e3b0f276cd8981b021d6bbced6749

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
GetSystemTimeAsFileTime
CloseHandle
GetStartupInfoA
GetModuleHandleA

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ