4fe3362e3264b52a2444abb7361822f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fe3362e3264b52a2444abb7361822f9
Size

85KB
MD5

4fe3362e3264b52a2444abb7361822f9
SHA1

4ed53c7fceded7ba317d404d981ab5d0e495b4f2
SHA256

6b1bc87dd75b3777a3cef769a5f753b3e83ba561e7969eeafe05750318bcb547
SHA512

ff52cbdfde0627880c0578379d0b820d0fe2e6150d10e59e54b19d3a2fa56988181b55d564b45b2e5081612b38002e3ffb6689a2387caff7e2f7b180a4e73dc7
SSDEEP

1536:5nx9xGLG142ymN5m53pD7ZEFa0qMNA0FiStoYTuBcrBWbh5UJOHc8pF2:PGqLHbm53dZmaBMNPFiStoYENbMJac8a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fe3362e3264b52a2444abb7361822f9

Files

4fe3362e3264b52a2444abb7361822f9
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6xthbcd9
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stiuk.kk
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

unq5ueci
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE