4f6e3cfd4fbf94710c423e097debfc0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f6e3cfd4fbf94710c423e097debfc0b
Size

152KB
MD5

4f6e3cfd4fbf94710c423e097debfc0b
SHA1

175595a7f6388dd803be1850fde3fabff650dc5a
SHA256

9547f7f720e5e36cea61c44987069243a2ffdeb5e90c152fdce5bb523800c249
SHA512

77782884ae2d760006d29528216754ec62cde7219d29582d6dbcfde0d2f4e59d721c83276ab3ec857ae12a1624f9c0edcccff138c26070d2adc7301a063102e4
SSDEEP

3072:OXY0olOXjZqMNbPMS1oRcyf+EjeQavUtc24XS67:OX39FvbPM6oRcyWEjeQavGs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f6e3cfd4fbf94710c423e097debfc0b

Files

4f6e3cfd4fbf94710c423e097debfc0b
.exe windows:4 windows x86 arch:x86

0058ba95a9d56dcd78433732fd228b3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
EnumResourceNamesA
GetProcAddress
LoadLibraryA
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ