4f4f6512658c992021637f5527553fa7 | Triage

Sharing

General

Target

4f4f6512658c992021637f5527553fa7
Size

51KB
MD5

4f4f6512658c992021637f5527553fa7
SHA1

b7c3118859e9aecf5538a3fb994e64ba12c09e71
SHA256

36f883f7c91441f655819e69e15a1c4168240b1fba6a968f7f3fec99c02403ae
SHA512

7ed626a8749e1b13293ef2cc5257fc6c47618dc928dbe77201a18ad83e18c97ce24792666a0995f856c6cb5d983fa65c9c05f09322f856afb249588a128e9078
SSDEEP

768:qIPfXOhlKoLxtCt74y/842kGim5admgS0CX0MinK4Z/yq235VrhnIHAi3wZ:vCKoLD+h/84UimkdxMiK4ZKqCVrKgiAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f4f6512658c992021637f5527553fa7

Files

4f4f6512658c992021637f5527553fa7
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE