4eea43aac46ddb669035390f39676c4e47227ac7f8190e40b790b99fc49500bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4eea43aac46ddb669035390f39676c4e47227ac7f8190e40b790b99fc49500bb
Size

73KB
MD5

02180d0eadd8467fdeafdc0060e6ada6
SHA1

f23fd7f57892d26ac440159a70736e7783a3cd03
SHA256

4eea43aac46ddb669035390f39676c4e47227ac7f8190e40b790b99fc49500bb
SHA512

6ab90cd8a804057c59118f4ffe13868d4f40e55a0ac5f099d4956c506e362f28fa617787b47b811f8019431e987b96553c81a0e3f839a876a3a47e03565a6a04
SSDEEP

1536:xfxc5f0gdUWEBIvKP3INiaX5m68x2TjftrRewZRW0Kywo9PUKlnMLQ/oe56:458gBEevKINiah8QtwgWC+Kml/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4eea43aac46ddb669035390f39676c4e47227ac7f8190e40b790b99fc49500bb

Files

4eea43aac46ddb669035390f39676c4e47227ac7f8190e40b790b99fc49500bb
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE