4fc884663356b495aabc930f4b98c906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fc884663356b495aabc930f4b98c906
Size

28KB
MD5

4fc884663356b495aabc930f4b98c906
SHA1

6e8ab120e5e2ab27ac3d42fc73c29f3b238c21d7
SHA256

73e945a9af5e465921412c3222d379218d47f54cab8d48e1652016e3f39eed8c
SHA512

ddfee5286d6dea1f8ad517d5464b2869edd3c9e6ca320ff0b15ddf4fc9d578c4321a57ef21d17870e5f06d7aaa457e1b16f71fed4d8e1ffe841d3f625da865cb
SSDEEP

384:qCZn63MOAx2cSQrhGyQ5dR1ZMDP3lkZ7x8UcxQ8Cg:qCUy2cSQrhGyOdvZC3cOLB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fc884663356b495aabc930f4b98c906

Files

4fc884663356b495aabc930f4b98c906
.exe windows:4 windows x86 arch:x86

bb54fbd61a94e7d8f24a7e6dba432fe7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
CopyFileA
lstrcpyA
GetModuleFileNameA
GetSystemDirectoryA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
VirtualFreeEx
WaitForSingleObject
CreateRemoteThread
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
lstrlenW
OpenProcess
MultiByteToWideChar
GetCurrentProcess
DeleteFileA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFilePointer
GetProcAddress
GetLastError
GetStartupInfoA
GetModuleHandleA
Sleep

user32

wsprintfA
CharUpperA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

msvcrt

_XcptFilter
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
__CxxFrameHandler
_EH_prolog
strcmp
strcat
strrchr
strlen
_except_handler3
strstr
memcpy
_exit
_controlfp
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE