4b37f49787ec68732e86e0a808b545a879fd7127e097f3bf02204caf3d228907 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b37f49787ec68732e86e0a808b545a879fd7127e097f3bf02204caf3d228907
Size

72KB
MD5

c3c654af56b2f1ef97c8338b52304bc7
SHA1

81db664d684a6e515144a5ca5bcada57b7322272
SHA256

4b37f49787ec68732e86e0a808b545a879fd7127e097f3bf02204caf3d228907
SHA512

389c37ba0fb876242d89874a90ceed26213e98380c600c0d4dc5716bdbf6eeb2bc61f2def8f3812d1c1610797cf34b14b82fb1a125f883f5b75dbc6874b2622f
SSDEEP

1536:xQ3YrzjzGabh9X0PCig8Hf7j6iQ3e7Or+:qizj7bhtMC98/7pIe7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b37f49787ec68732e86e0a808b545a879fd7127e097f3bf02204caf3d228907

Files

4b37f49787ec68732e86e0a808b545a879fd7127e097f3bf02204caf3d228907
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE