b4195c60828b590689c2fcac124ff894 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4195c60828b590689c2fcac124ff894
Size

76KB
MD5

b4195c60828b590689c2fcac124ff894
SHA1

98552ae47cd2249fd6712de2c505a97f1b7a3d83
SHA256

fafd347442a371b7143898c93e18e620283053f65e5cc5edf4dc3ed7dce10b26
SHA512

9a3fd0079c47da0d9bf71eacbf5173e5949db8634536e3a0aa8a58588005a2673085af75006b8070462dcf1e6556f9a96d1c4ccbdc4379a754418ec39bf031b0
SSDEEP

1536:/UrEkPL09XjQwkdlSq7QH3ymKKbIDpjVrs2ryrd1vUQuq6:/eEkPQ9obgKKEDHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4195c60828b590689c2fcac124ff894

Files

b4195c60828b590689c2fcac124ff894
.exe windows:4 windows x86 arch:x86

3a632916c23a10002802747eb06b3ace

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
GetProcessPriorityBoost
FormatMessageW
lstrlenA
FindFirstFileExA
IsProcessorFeaturePresent
AddRefActCtx
GetExpandedNameA
RegisterWaitForInputIdle
FlushFileBuffers
VerLanguageNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE