4eb89919895dbba275fca9fcbea7ac62 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eb89919895dbba275fca9fcbea7ac62
Size

99KB
MD5

4eb89919895dbba275fca9fcbea7ac62
SHA1

10bf115d44acfe9a6b8ddc573e7574b3efb8dc09
SHA256

b6ea538dc4a01faa33d18a2db7df8ccacfa979761a32c9f9b6b4f0574b7db0b9
SHA512

0a0e54d32a9981e53d44764377a75f3791c6300413c8626dff99244ff1153189a12608f3aeed020070ad33ab3c99733b8ea5f0632a8c146feafd34e1818ee5b1
SSDEEP

1536:8Rq5Z/qSntkexJDStvsmbNcTYn5Mj07zBnmOEkoK0YubG7lTeriAG1h3YAs:8oltRI1xb2U5Mj0fBn8f1YnVeOAGH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eb89919895dbba275fca9fcbea7ac62

Files

4eb89919895dbba275fca9fcbea7ac62
.exe windows:4 windows x86 arch:x86

6f64705fb36f1afdc5f9d32816d54bb0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatW
CreateMutexW
InterlockedExchangeAdd
GetLocaleInfoW
InterlockedCompareExchange
CloseHandle
lstrlen
HeapUnlock
HeapFree
GetProcessHeaps
GlobalReAlloc
FindResourceA
GlobalReAlloc
lstrcatA
VirtualFree
lstrlenA
FindResourceW

user32

DrawAnimatedRects
ReleaseDC
SetRect
DefWindowProcA
UpdateWindow
QuerySendMessage
LoadMenuA

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 593B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ