d4bb1c312fcdcf861d0eef2d067bb984 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4bb1c312fcdcf861d0eef2d067bb984
Size

106KB
MD5

d4bb1c312fcdcf861d0eef2d067bb984
SHA1

ae1eaad16b5a12bf81251ff019c44a5f8aa147f7
SHA256

e8e975b2efa371673a6c9f1b8090cdb93b8146c53d0b733eccaa7d752b7dc661
SHA512

944b60f5b1571860963a437e9a86f20880f7768b58fa12bca15b4225c40c76a99ca3238df065ff8af4dd042d986d9a9c0c44264102d35f829f8ff751aa1af1b1
SSDEEP

3072:1nib2NFQEc2sij2h18PE6RhGckfBKbblj563sB0IFXsGvsk:1ibYFXc2sij2huRRIckfBKbbBI3sKmxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4bb1c312fcdcf861d0eef2d067bb984

Files

d4bb1c312fcdcf861d0eef2d067bb984
.exe windows:4 windows x86 arch:x86

4d8e9e06f8e51550e3e5089179e9846d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA

Sections

.data
Size: - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lhhxs
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE