d4c4ee6e8016024b5ea7a8db274201d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4c4ee6e8016024b5ea7a8db274201d4
Size

104KB
MD5

d4c4ee6e8016024b5ea7a8db274201d4
SHA1

0e3d659ef133562bb39782c6443aefe2fdcfd7bc
SHA256

002f2462f6352a7e41ddabe8fd222a158cdf876d5a35c0714844649a2af4dec1
SHA512

c615a4c067432149859a92f25453c414cc588490d85bda535f1ee6b39a35651f7a127aa9a21b41465e01ee47d4925ecbbfad0df4e4c19647f4a1eb9f1b523bf9
SSDEEP

3072:IHZoTWiIyhD6EuGf7sHwTL/Fk8jwaaHw7Koj4r:oZOWidRZf7sHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4c4ee6e8016024b5ea7a8db274201d4

Files

d4c4ee6e8016024b5ea7a8db274201d4
.exe windows:65535 windows x86 arch:x86

9e8d7b892fde2f016bfff3a9f787a655

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
SetConsoleOutputCP

advapi32

RegConnectRegistryA
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE