b4470c675213fc9319f74fae483d1cd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4470c675213fc9319f74fae483d1cd3
Size

30KB
MD5

b4470c675213fc9319f74fae483d1cd3
SHA1

c203a04ab4118284b5a3ad61926c64f90302dc0e
SHA256

817b0203e4e12c671d831a63f904bb6aa0bb81379b06a1b4cc6acf5835ffb8ab
SHA512

cc493a17f6372568246eafd15fc14472a1bd308d9e80a8e41ef1858288d7978f9a47eaa60b7ca2dbd23cec41891c47160f98b9dae3f3bf48a5a2975728e0058d
SSDEEP

768:rMLMhlzjRKiQWgdNmWhtaHxNZbR3Xe9lZNFY5:wAzjRpng2saHv3eJY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4470c675213fc9319f74fae483d1cd3

Files

b4470c675213fc9319f74fae483d1cd3
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.TEXT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE