4f6e05b3aff4e15292d5e9b0b4ce89d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f6e05b3aff4e15292d5e9b0b4ce89d4
Size

29KB
MD5

4f6e05b3aff4e15292d5e9b0b4ce89d4
SHA1

7bdb8654d756d77d552d293bd8dc36bc5791b5ab
SHA256

7a4e6a967a8f7ae86d3adf32831fa3bb7561aa406288ae24dae270f10e9ca3d4
SHA512

9f6824be0f92cd73b5b8f3c77a8edeadfe9b1d1b88c5bd940f169fc12e731b2a46e97712546a9d3209b255b3afc538724303d9b807efdfa6166767d2756f6918
SSDEEP

384:DWBXuHcY7g3F1w4Cdw7yRuKEQPLot71rV51b44X5HbQm15F/ujBDHtgN8c4SlX4Q:iiB4CC7eTEoL2Z51FsMdyNXc/cbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6e05b3aff4e15292d5e9b0b4ce89d4

Files

4f6e05b3aff4e15292d5e9b0b4ce89d4
.exe windows:4 windows x86 arch:x86

38c6d0ce9ec0641add99e9e27a971139

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameA
GetProcAddress
GetStartupInfoA
GetVersion
WriteProcessMemory
CreateProcessA

Sections

.text
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vcxavue
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE