4eb46c82f35fe3bba2fb9d0eecb42ff7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eb46c82f35fe3bba2fb9d0eecb42ff7
Size

24KB
MD5

4eb46c82f35fe3bba2fb9d0eecb42ff7
SHA1

b3f32312d5f3b9feee04b4a325324318cebef32a
SHA256

ffbef926052e397d80231d0eb09ada2ca7865166f044872b766966168de6daa4
SHA512

1af8555abf58f5224a129a6c0eb24bb23569a9160fe18b99dd18db82f9b5d1520508129d092bdecc1663327219c14ad0fc2bc67009bbbf81f0f184ab1c392404
SSDEEP

768:6i0BLa6qoY8TIyWmU8KRC80kQMb0Ts2p7:6iyLkHAWmU8sQLTs2p7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eb46c82f35fe3bba2fb9d0eecb42ff7

Files

4eb46c82f35fe3bba2fb9d0eecb42ff7
.exe windows:4 windows x86 arch:x86

ca023b0976fe29c9f183c650d8ae30a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
LocalAlloc
FormatMessageA
SetEnvironmentVariableA
GetLocaleInfoW
GetCurrentProcessId
FreeEnvironmentStringsA
GetOEMCP
ReadFile
PulseEvent
GetProcessHeap
TlsFree
GetSystemDirectoryA
SetPriorityClass
FindFirstFileA
FileTimeToSystemTime
ResumeThread
GetFileType
GlobalUnlock
InterlockedIncrement
GetStdHandle
SetLastError
CreateFileMappingA
GlobalMemoryStatus
FileTimeToLocalFileTime
LocalFree
GetEnvironmentStringsW
ExitThread

msvcrt

wcschr
_beginthread
__getmainargs
_strnicmp
_snwprintf

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ