4ff0ea10ccd5c7fce76675c3870633a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff0ea10ccd5c7fce76675c3870633a6
Size

76KB
MD5

4ff0ea10ccd5c7fce76675c3870633a6
SHA1

a76abab17debf9dbd7c3a69b316d36949a890eaf
SHA256

8ed6ae542e99ac0dd82c50eef49f70dbb88c8c93678bcbae1758f8717e99bbaf
SHA512

3cd69bbb102145e9261c4f100c7138e77d8a4c734af3456924fefaebaf1914a525d20b8fdf8fe21b418e216c6e95e40bdde7bb39cf0a07cb92d07c227fcfbd92
SSDEEP

1536:c9X4MJ5V0/52+1PPYKIbNN6Fpqm85hLHiNhvpjVrs2ryrd1vUQuq6:0omV0xf1nYlGjMhuDvHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff0ea10ccd5c7fce76675c3870633a6

Files

4ff0ea10ccd5c7fce76675c3870633a6
.exe windows:4 windows x86 arch:x86

be2cefe866104d2e0109b4f64c603ed9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
GetConsoleMode
OpenConsoleW
GetThreadLocale
GetTempPathA
Process32Next
ValidateLocale
CloseHandle
ReadFileEx
GetConsoleAliasesLengthW
RemoveDirectoryW
SetTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE