4eab58d7ce2b17c62d2d5d5c67f43cdb[.]exe | Triage

Sharing

General

Target

4eab58d7ce2b17c62d2d5d5c67f43cdb.exe
Size

228KB
MD5

4eab58d7ce2b17c62d2d5d5c67f43cdb
SHA1

0dd0b84ac096c076a28b6edf01a2539228b62b9a
SHA256

c3144b575417849e4c50313ba6652434ecf195b8df12574f23ae09addb428c02
SHA512

b7d22f2d0c1532cb41a26579e78d960b435eb23bf22c76e6dd5c867ee1939d7f25180a698d694aa4a4e538236e37f05cefadbf055aec38c3cf185c1ac081a6d7
SSDEEP

6144:66M96wgvRHCzOYtqlGyzcsX3KA0LQIQRFBQ:vi3gNCpOdn/un

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eab58d7ce2b17c62d2d5d5c67f43cdb.exe

Files

4eab58d7ce2b17c62d2d5d5c67f43cdb.exe
.exe windows:4 windows x86 arch:x86

ef39d474ee88b9215814d74ee695b02b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
HeapFree
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 160KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ