de4cbf4a7f38d4ed09cadc93be4e2625 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4cbf4a7f38d4ed09cadc93be4e2625
Size

28KB
MD5

de4cbf4a7f38d4ed09cadc93be4e2625
SHA1

b80c7d46e6a8aad02ae5b1308ea8ce257c568fa7
SHA256

06dddfe730693dbb43383d68db93ac49fd52b8a03ab4ae497e40b60e46d4107f
SHA512

89ad47d35fdde9d0f6e5dc0f2ced3ac2ed6318d15337de3a31e98445234a805a7007e8ea6ac5e8af6795e5eb0515247e4407a92aae74b8e4b79244102502af86
SSDEEP

768:DAHP6XQeiBmyoLmjryhK8PxGPyhZfTcgC4Ma/K:xXVi0xLmjGRGPyjEAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4cbf4a7f38d4ed09cadc93be4e2625

Files

de4cbf4a7f38d4ed09cadc93be4e2625
.exe windows:4 windows x86 arch:x86

db3b2cd368e42ed217b545ab175dd884

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 51B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hehe
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE