c4673c2cbd43b8668b606f1c63e160df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4673c2cbd43b8668b606f1c63e160df
Size

6KB
MD5

c4673c2cbd43b8668b606f1c63e160df
SHA1

dfb98d344839cfbe890938c9c51659918f3c234f
SHA256

01c71ffb02a2252a7a56eabac28f18396485feaa07b30422a6ce0d35bd45c8aa
SHA512

4d87d99f63902ce3678b5dbb8c91eaa690babee2c59f1da2fe4dff1af1b8867c4dc92d102a45f606fccb3b6c86fb4ea23f54f3abcb05433357983e223aaeb6f2
SSDEEP

48:ZvtoD4vZMb6BZ/W2+Eux5ESJhd4JoBeeZ13p3v/33x4vuBCBkifVj5wky8KCr4Zg:Z1jZMKiJhO2keZ13pXS7fVjaTQn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4673c2cbd43b8668b606f1c63e160df

Files

c4673c2cbd43b8668b606f1c63e160df
.exe windows:1 windows x86 arch:x86

f0267c12108a175e563cb54160a6c8bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleFileNameA
CreateFileA
GetFileSize
ReadFile
GetWindowsDirectoryA
WriteFile
CloseHandle
Sleep
LocalFree
ExitProcess

user32

wsprintfA

shell32

ShellExecuteA

Sections

.data
Size: - Virtual size: 65B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 434B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ