de4fc5eb1da6b5825154235f0a1f733e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de4fc5eb1da6b5825154235f0a1f733e
Size

44KB
MD5

de4fc5eb1da6b5825154235f0a1f733e
SHA1

dffdd10a9181baebf1adff696d2b5c6c20856988
SHA256

16c1978d561e05d8326be39b216e80d91ada7bcaf2044edbdf572bb3d699d42d
SHA512

901f913db0475891ee000fcd91621d3b6d429cbb6a27956773cf8244dfd8bb6f60a2ce27455f74fd37599cadfed1db75add6e41cb18fde77a7d9fd9f55f53db6
SSDEEP

768:J0Kl4tATPcIRSLeHtP6J8izlcVP64Z7DxPlSJ:J0KyATPJRSqHtP6JZzlcVCkDxP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de4fc5eb1da6b5825154235f0a1f733e

Files

de4fc5eb1da6b5825154235f0a1f733e
.exe windows:4 windows x86 arch:x86

76b6e0e9b3cb6de9362c3a44e352d5b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 346B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE