4fd42916c96a6a8986a9295444af04cb38529acdafd1aeb5ebfb58a82243c4f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fd42916c96a6a8986a9295444af04cb38529acdafd1aeb5ebfb58a82243c4f2
Size

1.0MB
MD5

a425f6596825dcf0d977e413d39115fb
SHA1

7898352565a518ff2426d222f72d46e2a6e967b7
SHA256

4fd42916c96a6a8986a9295444af04cb38529acdafd1aeb5ebfb58a82243c4f2
SHA512

3f46e7036b0ac0eb9aa000883de80117c659e4cac7dd42b3dbea46a779751951e4894a661f18743bf672692f37b64bea0cc2cbf39a718eb3151c85fb70a6b33e
SSDEEP

24576:Z2FpmlfYOxv5yvhDHSDeN9K9+ejB3lmX4TFBA:Z2KlgOC9qey9+eVXRBA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fd42916c96a6a8986a9295444af04cb38529acdafd1aeb5ebfb58a82243c4f2

Files

4fd42916c96a6a8986a9295444af04cb38529acdafd1aeb5ebfb58a82243c4f2
.exe windows:5 windows x86 arch:x86

b2eef02a3aa045c8e82cefa505fce1f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

GetMessageTime

advapi32

AbortSystemShutdownW

Sections

Size: - Virtual size: 4.4MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE