b4fdc62f0d6b8887a6ae024ea9ccc09e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4fdc62f0d6b8887a6ae024ea9ccc09e
Size

44KB
MD5

b4fdc62f0d6b8887a6ae024ea9ccc09e
SHA1

4ddece81a730e10883120e9acf482a7cc6e4956b
SHA256

e78edf5ed153d112c75ae85ac1620b9f6cfc711ab59a9378ae036e1a15c09d8d
SHA512

91d3e53a9d1dd3704ff9d0541578ff2b7bb2304fc56a6226eb868854130b8f2d53db564a233454c5ceda6424cbec9aeecfb0ae669c41cfcd0f9a241d3f138d8d
SSDEEP

192:1UQcNhCefrV9zFCTr312vkWl92NGossJ608K:t8HfrV9aZ3i2MosK6dK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4fdc62f0d6b8887a6ae024ea9ccc09e

Files

b4fdc62f0d6b8887a6ae024ea9ccc09e
.exe windows:4 windows x86 arch:x86

11230e9744c56754480a43b992118932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
WinExec
GetTickCount
GetTempPathA
GetProcAddress
LoadLibraryA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetWindowsDirectoryA
GetCommandLineA
GetVersionExA
GetLocalTime
ExitProcess
Sleep
CopyFileA
GetLastError
LocalAlloc
InterlockedExchange
RaiseException
FreeLibrary

user32

wsprintfA

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
sprintf
_itoa
fopen
fscanf
fclose
strchr
_stricmp

rpcrt4

UuidCreateSequential

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ