4c24e3beca29720dddc742863e7198a556700bbe0083814c39a18818f8fd3d76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c24e3beca29720dddc742863e7198a556700bbe0083814c39a18818f8fd3d76
Size

119KB
MD5

d73d55497e46748b52ebacee08f1c007
SHA1

5c086e1b90a3a7070ddb6103937cc5b326e5c5c3
SHA256

4c24e3beca29720dddc742863e7198a556700bbe0083814c39a18818f8fd3d76
SHA512

7b096ecd71153a69994e604c6f500cfd25183e20fe32d778cccbee30e155fb05520b2526814cc71348d65f8d16fe142af1a9f4d6e358bcdb8344bded39dea49c
SSDEEP

3072:LuNDLyrcmV2/tZdhVockJwiEuH1MU+rZqc8Rr/oKr:iFfmV2/t/noNJi1bZqc8RrFr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c24e3beca29720dddc742863e7198a556700bbe0083814c39a18818f8fd3d76

Files

4c24e3beca29720dddc742863e7198a556700bbe0083814c39a18818f8fd3d76
.exe windows:4 windows x86 arch:x86

252767fe5d87a2a2b8566c2c9fb307c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsGetCacheUpdateCount
SetConsoleMaximumWindowSize
FindFirstVolumeW
InitOnceInitialize
ClosePrivateNamespace
EnumCalendarInfoExA
LoadLibraryExW
BasepCheckWinSaferRestrictions
SetFirmwareEnvironmentVariableExA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE