c4eac6cb0767b2e354bc49c6a8c22228 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4eac6cb0767b2e354bc49c6a8c22228
Size

63KB
MD5

c4eac6cb0767b2e354bc49c6a8c22228
SHA1

5af3c6235a5ad5fae1faf9263411fbf7277ff6e3
SHA256

9b1b6069f2434e7b7518549bfc46aef09ac109a4e54083ae0be84a04dec22cdc
SHA512

92d6fe19f622e957e44b8c3594f126407554d4fac39ab4d40acb74065dde76fc24278eec5c2b332a6799f8385a1b2116e4f59c935c5bd4a1cfcd5b1fa50946e1
SSDEEP

1536:HcUUNxMFXpa3zkE7tNtnvQu/7q5A4q57zVanbWUiP:8tcF44OtbvQuzq+f57zVanbW5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4eac6cb0767b2e354bc49c6a8c22228

Files

c4eac6cb0767b2e354bc49c6a8c22228
.exe windows:4 windows x86 arch:x86

ba9e66a74c8e7b627199472b2dfb3b7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreakProcess
GetCPInfo
CreateJobSet
GetDefaultCommConfigW
ExpungeConsoleCommandHistoryA
EnumCalendarInfoW
ReadConsoleOutputA
GetThreadContext
GetPrivateProfileSectionA
ReadConsoleOutputA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE