b4c8690881065b733ffd7945039544bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c8690881065b733ffd7945039544bb
Size

120KB
MD5

b4c8690881065b733ffd7945039544bb
SHA1

9f4c3e12e7eb1adb9bd6d2b980cbcb89ce438178
SHA256

6c29585e5737e6ff1cbdce9fdf4bbbb7532544a2ef5e850116bd1359332334a6
SHA512

4c798d3cd123ae806c22a948b6c4f0f5dfbcfe6fd3a1160b961440a785ce989ee43d203f02ceda455b3f80fbb9b0fb3a7abd08b6b64dc05437a4a91c63f59e74
SSDEEP

3072:SUYcUTR9sHK1v9X9DzjVZQR8koebH4gQN:/ze9njVZQ6GbHG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c8690881065b733ffd7945039544bb

Files

b4c8690881065b733ffd7945039544bb
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE