c4be5d2157aa61e5fcc134b2982cfbc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4be5d2157aa61e5fcc134b2982cfbc9
Size

1.1MB
MD5

c4be5d2157aa61e5fcc134b2982cfbc9
SHA1

5a6d7d14b6e25b61551746b71f53b0097aa8e282
SHA256

8f7338561377b121b2b1c7bc6af24827d1f1dcc6eaf244c5c0728d27d5357784
SHA512

61a7080a19714bf0c72e66e7026c4d6e77c9615e8b96a4bc10bbea13698b3f97a661bb3dac679575151e75d5a4aeaf9c110f82efc72cd74f03b9ba373c25e6f6
SSDEEP

12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqktA:AUXmBo/ugWvYDeHT/hA4VvhEFOYkIm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4be5d2157aa61e5fcc134b2982cfbc9

Files

c4be5d2157aa61e5fcc134b2982cfbc9
.exe windows:4 windows x86 arch:x86

a7bbbc378f55cacb51bd14de8bf21f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW

user32

ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ