4ff8ef6dcc8a4ba5fb0f646d5bd17a04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ff8ef6dcc8a4ba5fb0f646d5bd17a04
Size

116KB
MD5

4ff8ef6dcc8a4ba5fb0f646d5bd17a04
SHA1

05763f8db005d16b528fcbb38f673741b9d16284
SHA256

cb79a8573e5f2a2c322b52530ebf0175520a9ca2a289a3f63514a4cadc23909f
SHA512

61039aceec064103cce6f0ee1dc523dbf34e6d7870f9457edc3159758adb2065e1faff1fda212b3db4467ce96f684ba9a41551072db93a5a8486a4b6fa92e42f
SSDEEP

3072:9oI25BB2eaoF0J0avEZ4HC5GpaXkW6lX:9orL0JGZ4HCZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ff8ef6dcc8a4ba5fb0f646d5bd17a04

Files

4ff8ef6dcc8a4ba5fb0f646d5bd17a04
.exe windows:4 windows x86 arch:x86

c7ff095b3809ece15d798c7dfad05061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
WriteProfileStringA
WriteFile
WriteTapemark
ReleaseMutex
EnumCalendarInfoExA
GetStdHandle
lstrcat
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc3sec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc3sec1
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec2
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ