c4f9b2fa9965ac107ddc60af32d713c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4f9b2fa9965ac107ddc60af32d713c9
Size

79KB
MD5

c4f9b2fa9965ac107ddc60af32d713c9
SHA1

52e716816ebd5a5bcfdba1f575a4d21fa5ceaafa
SHA256

7bfc558614587e771e7c8de1834e02e95a6ab25dbb7a576c42e35e6865c3e3e2
SHA512

af3c00e7a27f843c581cd771123f97ef1f7dc224c0f44d069860c6542a3809c3ce792259da5e38d48d31160512f683785d5960ed62c1dd5bd71d64de089c1fbb
SSDEEP

1536:dRbygT9pE4NsBLr3Ka5NJduDyv6sonjUtU1LFuBDB7u/qXAzoodA:d1yeEwsxua5QDDnjqQRABi/UAzoodA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4f9b2fa9965ac107ddc60af32d713c9

Files

c4f9b2fa9965ac107ddc60af32d713c9
.exe windows:4 windows x86 arch:x86

119ba01abad812c4a461368344bcd6cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect

Sections

.pepsi
Size: 64KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ