4f36985e69d6ab53dadba4c590de8cbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f36985e69d6ab53dadba4c590de8cbc
Size

63KB
MD5

4f36985e69d6ab53dadba4c590de8cbc
SHA1

c5065f6390edb3f64d6fe2660aeac810246b3ca1
SHA256

4c02db2015ce80eac444e90f1c633408cf12e39ff280ee4447ea9e4115da761b
SHA512

e395c61a5d7630f6e9b30fc49e8eec4449942f0d9430dfdaa675ba2028172df58cbd51462796d911c81075d13445b68bc598a1576c6a9d59051771912a1fbff0
SSDEEP

1536:ykq6vMNujHLLrdfDFEPugZms2MUoI4Yu6xQIGsy3pwCBzrm7rjKBBwqzyRgJfILn:ykVxESL5m3cHHZ6rXa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f36985e69d6ab53dadba4c590de8cbc

Files

4f36985e69d6ab53dadba4c590de8cbc
.exe windows:4 windows x86 arch:x86

7a45372a70ade42eb7d75c18dd0baf3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadHugeReadPtr
LocalSize
GlobalFree
SwitchToFiber
QueryPerformanceFrequency
SetTimerQueueTimer
SetThreadExecutionState
MultiByteToWideChar
VerSetConditionMask
WaitNamedPipeW
SetConsoleNumberOfCommandsW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE