c4ba8a0bd7607cb06ec0f0ec2c3208df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ba8a0bd7607cb06ec0f0ec2c3208df
Size

86KB
MD5

c4ba8a0bd7607cb06ec0f0ec2c3208df
SHA1

9bfe4f9d4c3ba860bd7c2a3330c820fa16007caf
SHA256

2549d095513c865956809e92da12ee7155f487090259674a27a729c795fc3259
SHA512

1f5255db0ac579f81ef88354ec10f37a0711d3332f8ed49b7ec8baf366fe31a97721a10162cc1416c22da3e04bffa4bcca794cdbc419bc280f3b91aff909277e
SSDEEP

1536:bb54HbFM+vsjPiW/mF89vBLPqIL4wfoHcDnCBFXjEErxTWDTMqhGKYIZTET8ljMG:bb5492PiWeQbNLrgJjBkMqhGKZTbljMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ba8a0bd7607cb06ec0f0ec2c3208df

Files

c4ba8a0bd7607cb06ec0f0ec2c3208df
.exe windows:4 windows x86 arch:x86

cb5d5415d9154ea868bdf0fae93e074a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserWorkItem
FindNextVolumeA
SetConsoleNlsMode
GetCalendarInfoA
GetConsoleKeyboardLayoutNameW
OpenFileMappingW
EnumDateFormatsExA
FreeConsole
Process32FirstW
GlobalHandle
GetDateFormatA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 29KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE