4aed0011367478ad8ce0bef3363254bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aed0011367478ad8ce0bef3363254bc
Size

193KB
MD5

4aed0011367478ad8ce0bef3363254bc
SHA1

26959fec32660d678b5288277449a1c795bdb3e7
SHA256

d289ca21256821be70327ce0271b589f4e73b642ae0ad48fa23607bcc42c05d5
SHA512

9492552b32b496adc0febd1f11b6a2feb35cca0f238451c94233e4341a93fafb688dc4b4f04d5adb0ba444703342c7ead503a0981ab0e2d6d4198a3588d7a3b6
SSDEEP

6144:9v22X4W1nkg26yeRbxBZI9vbD4B5yKI9M:R1nbVxBS9vaneM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aed0011367478ad8ce0bef3363254bc

Files

4aed0011367478ad8ce0bef3363254bc
.exe windows:1 windows x86 arch:x86

c5be99196a6c1865f2d20626faa31615

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringW

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
HeapSize

shlwapi

PathAppendA

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 748B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 268B - Virtual size: 268B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ