b4b3bd3b2b4d1c6cfe9d28f24c89f74d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4b3bd3b2b4d1c6cfe9d28f24c89f74d
Size

45KB
MD5

b4b3bd3b2b4d1c6cfe9d28f24c89f74d
SHA1

bec468cd36e4f7a7053d5d2cd36392941c942b81
SHA256

33289ca7d9a13a8e5be250e83c0ccac26cccd4bfdb7aee1933b2b9e04429f0cb
SHA512

fd05f448b63ff3d5cdb78f3966d033f206ea64e89fce9dad1541611559f1385244e6da2eff7c5710c6ea7fec154c88191e23e7fd0aa576a9f0b7574e73d0aa6c
SSDEEP

768:K2l6Kny22v59UgLoJwmc38c0Lf3krDSoeXkWas:KMNI9jorOYfCeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4b3bd3b2b4d1c6cfe9d28f24c89f74d

Files

b4b3bd3b2b4d1c6cfe9d28f24c89f74d
.exe windows:5 windows x86 arch:x86

ce1772065187eaf6f903b17e2f311b10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
FindFirstFileA
FindClose
FindFirstFileW
lstrcmpW
GetCurrentProcessId
FoldStringW
GetCommandLineA
MulDiv
LocalSize
GetFullPathNameW
GetLastError
WriteFile
CreateFileW
SetLastError
SetEndOfFile
LocalReAlloc
lstrlenA
HeapAlloc
HeapFree
CloseHandle
VirtualAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
GetCurrentThreadId

user32

InsertMenuA
GetMenuState

advapi32

RegOpenKeyA

oleaut32

LoadTypeLi

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ