4fd9796a6ee9f2ebac2bfc4c646a8b3c | Triage

Sharing

General

Target

4fd9796a6ee9f2ebac2bfc4c646a8b3c
Size

480KB
MD5

4fd9796a6ee9f2ebac2bfc4c646a8b3c
SHA1

2bf33dd161fd50cf5a03aabd16d4ac4f0b5bf589
SHA256

e572ca0418bddecc1cf2c286d2a766a022c36e00aa6ffb239f0df789b157af72
SHA512

efd8a1934bc21108c6b85f50803fdb5c49934f90172272ffd58c01d5d56be2b4a602aa935fbd81672ac6a5390f2d98f34a0bed4db1ce31881adbdf94222cf299
SSDEEP

12288:5eAXbizLbrQtM+z9B/PtfSPCt2ARHBWWoPpFLe4/:5hi74M+DXtH2YHQvRFLe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fd9796a6ee9f2ebac2bfc4c646a8b3c

Files

4fd9796a6ee9f2ebac2bfc4c646a8b3c
.exe windows:4 windows x86 arch:x86

df2d5fbdd75063a48aa2b2c1304cb3cd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageTime
TranslateMessage
GetDoubleClickTime

kernel32

GetVersion

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 295B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE