b4dbb79cb724a684589cb21d8e6e1951 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4dbb79cb724a684589cb21d8e6e1951
Size

36KB
MD5

b4dbb79cb724a684589cb21d8e6e1951
SHA1

7df037f84f8e6eaf4b5731bd382443c0b36ba2e7
SHA256

97a95526f88c016c99fd904f701f08019769a573f9f1a05ee4800333c3c214b3
SHA512

b6c4e99bf54d1ec7ced95ea469ef00868894c08edb0c7053f49ba8176bb6ea6eeb914581bf1d940be3f46921cfb7ed90991333a97f1ff77194a632bb239f7514
SSDEEP

384:qCSnDQUtRMOY+q5wHjp/U6ifBZ9Nk1h11oqeL/FrBeWC/79Pr40jD:qC8QUtRMOYSOnB3abtk/6d79Pr40j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4dbb79cb724a684589cb21d8e6e1951

Files

b4dbb79cb724a684589cb21d8e6e1951
.exe windows:4 windows x86 arch:x86

631225c1aba14bd678e34f7b43424264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
signal
sin

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 328B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ