4e3ccf430e8c83128895e54e9cbd298b2b45633fbcb72c25abfddfac9ee42e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e3ccf430e8c83128895e54e9cbd298b2b45633fbcb72c25abfddfac9ee42e99
Size

902KB
MD5

9fa86c099d3d963bb12ba1a75427e01d
SHA1

88263adbd0bb5c86c3fc8127f2c65f8c16dd0482
SHA256

4e3ccf430e8c83128895e54e9cbd298b2b45633fbcb72c25abfddfac9ee42e99
SHA512

1aafacc530c1649d854f33461b55e9d7b0020af6b0ffc05f575a29601067130bb57aab0ede759973fb58c6c7b0ef46f3037542c64c211d897d2b1b354ffd70d7
SSDEEP

24576:gf604x7om7hcgRyXqeWupuM1THu6TBo/dv1Y4unOc0K:e6CMdQtW8jTB+v1zuOc0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e3ccf430e8c83128895e54e9cbd298b2b45633fbcb72c25abfddfac9ee42e99

Files

4e3ccf430e8c83128895e54e9cbd298b2b45633fbcb72c25abfddfac9ee42e99
.exe windows:5 windows x86 arch:x86

b702eb2e3a9d89a08fcdfe2005da1f83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

LoadMenuW

advapi32

LookupAccountSidW

Sections

Size: - Virtual size: 1.2MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE