4fbc3698947b6119afb8ee8da9640008a4ff9453feadb387b117e0e751d0bbb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fbc3698947b6119afb8ee8da9640008a4ff9453feadb387b117e0e751d0bbb9
Size

23KB
MD5

a808940d7d5888f2994ea19e7cd7a2f2
SHA1

ed652ee01c8f8cb18fc8cfd0384ea267e357e8f1
SHA256

4fbc3698947b6119afb8ee8da9640008a4ff9453feadb387b117e0e751d0bbb9
SHA512

2a4d1d8e08bef6de762fe80f3ac540899186be9a1becb47445226cee4c30cf50cdfc28301bbe7a96ea955711420e4ee066e505d4c788b59ad1816c9d1fa3f30b
SSDEEP

384:ErzPi4JpsfbiRk7X/4zk2cmholRZAW1O1rV8HPWjKXBxO/vB4GQ6:Erzi4bsf+Rk7Po1W1O1rEtxsHB3Q6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fbc3698947b6119afb8ee8da9640008a4ff9453feadb387b117e0e751d0bbb9

Files

4fbc3698947b6119afb8ee8da9640008a4ff9453feadb387b117e0e751d0bbb9
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE