4f9bd07a37cecabf83c8c7fdbba05faa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f9bd07a37cecabf83c8c7fdbba05faa
Size

377KB
MD5

4f9bd07a37cecabf83c8c7fdbba05faa
SHA1

487d30d5416c48a3c44d910614c2213b0bcdce42
SHA256

85da022e9d7f53d45b01adb21484ca46942cedbe669f29339759589f0dab7474
SHA512

ab0f7ff167ce916e1f718bf42e1287b13e7daad1f9725f184f70a0c48a90eabb214d9d7ac9ca433b5890be4b6a20346a114e26f1298475b0056d59fc4e32a413
SSDEEP

6144:QEKW+EZFXJUR4KfdmHyDQo2JOsi8i2wZ7oLYzUZCWlqiJcWkM1fFgv6dB:QzW+EZFCR4mAWQos7i8WZ44QEimmZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f9bd07a37cecabf83c8c7fdbba05faa

Files

4f9bd07a37cecabf83c8c7fdbba05faa
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 740KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 372KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ