c4a5870050db9c7af909f0c114df8ac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4a5870050db9c7af909f0c114df8ac4
Size

2.4MB
MD5

c4a5870050db9c7af909f0c114df8ac4
SHA1

77d4cfcfd4dad8f310bc356d23ce4b35969b6cca
SHA256

87ee7d166a5cfb66d067c883ecd2dd5f82e4b705a1bf47d52c1e06f3b2b9e297
SHA512

d5da9ea9baf9ed50e74585515f0ce6ff0e0ae567684f200976fddc35ef97b130268f44c3cde39b7d5c2a66bc5a1d9af7c5d99df5a0050ef0a6597e2453923437
SSDEEP

49152:OxMMcvFoTcAFfUMbTdWJbZIJowmTVh99PaaiLGJfG:sSogifJTdW3IJgTVhBiCG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4a5870050db9c7af909f0c114df8ac4

Files

c4a5870050db9c7af909f0c114df8ac4
.exe windows:4 windows x86 arch:x86

55441918e4175daa41864c86ab18ca79

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFileEx
DeleteTimerQueueEx
CreateTimerQueueTimer
UpdateResourceA
WriteFileEx
VirtualAlloc

user32

CreateDesktopA
ShowWindow

authz

AuthzInitializeContextFromAuthzContext

Sections

.text
Size: 675KB - Virtual size: 675KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 438KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 93KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ