c4ea9d6776604556cd16b5034109ab8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4ea9d6776604556cd16b5034109ab8b
Size

61KB
MD5

c4ea9d6776604556cd16b5034109ab8b
SHA1

de486933e1eef62c928dee2bcb3dd781c42b32d9
SHA256

40b59d009491f462d05c42eb5d4293a255dd4a5d91422461b03425ad14277383
SHA512

a119dccf2ac70da259c0744430f19d9b248dfc36d6862d5917867172a25b2adfcec5b51433414eab96685b2d6d309ae50a42d4395209e016a37e01e9a2be8637
SSDEEP

768:KVNFM3oSA78oEAIceXVNFM3oSA78oEAIce:GGoSC49GoSC4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4ea9d6776604556cd16b5034109ab8b

Files

c4ea9d6776604556cd16b5034109ab8b
.exe windows:4 windows x86 arch:x86

02fb14d60c4fe85bea0f771c508c8de5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
CreateFileA
ExitProcess
GetTempPathA
CloseHandle
_lwrite

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.corpse
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE