b4f0acd0f80b48439680f6647df794c7 | Triage

Sharing

General

Target

b4f0acd0f80b48439680f6647df794c7
Size

29KB
MD5

b4f0acd0f80b48439680f6647df794c7
SHA1

5bb4173469eb394ef17bb5b05f5368b2f7be7898
SHA256

0f8c14a59359dc953c5f7fa5e6e222cbfbaa9d223b9eaa92c255225c2606c50c
SHA512

0f192206ec3f7a3ef902dc3d746fa94ddcdb7d1c6f0f2ca8b9606e1c8334aa900f7b8af9356adf301e20ceb2a867934103c30ad9b257a4e9eefd9bbdf6cb534a
SSDEEP

768:Z3h7TzTBziifTeiZSVWihwEknh0L7OTLeN7Qf7:JZ/nEkh8OTKNy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f0acd0f80b48439680f6647df794c7

Files

b4f0acd0f80b48439680f6647df794c7
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ