b4e12bec4fd547f04a871d7f892e212369f6b3d2b98c71c6cba3410f13915a5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4e12bec4fd547f04a871d7f892e212369f6b3d2b98c71c6cba3410f13915a5f
Size

76KB
MD5

642003c7196f77ff37b7f4e6c09282ef
SHA1

776af9b92b5e1f57bcd1dd74ae0ebb001c3c0d37
SHA256

b4e12bec4fd547f04a871d7f892e212369f6b3d2b98c71c6cba3410f13915a5f
SHA512

72c994994ef5bcbc677f56f886f1ba85f2441d5f89423b5893b130ab8e860ad0451fa0292c8def5f0ad41dd4d7976582013aef07dfc2c7a93250cd53a9673688
SSDEEP

1536:NpYzOX0+c1/omVqeucGfMZ2CNS8wbRYs7YOZZxwTx253bVpjVrs2ryrd1vUQuq6:oi0+xmceafMAUFlOprxHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4e12bec4fd547f04a871d7f892e212369f6b3d2b98c71c6cba3410f13915a5f

Files

b4e12bec4fd547f04a871d7f892e212369f6b3d2b98c71c6cba3410f13915a5f
.exe windows:4 windows x86 arch:x86

36299a3747cf65f4475477f089322d5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessShutdownParameters
ReadConsoleOutputW
ExpungeConsoleCommandHistoryW
CreateConsoleScreenBuffer
HeapUnlock
GetConsoleCP
FindFirstVolumeW
SetThreadContext
SetTimeZoneInformation
GetWriteWatch

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE