b4da6474e46d2fab5bbbdd7bf366a4ee7731b6db6c5a8cc98058c50c26922e80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4da6474e46d2fab5bbbdd7bf366a4ee7731b6db6c5a8cc98058c50c26922e80
Size

66KB
MD5

9f30d34ee305a21609e2cb2825c95136
SHA1

0fa7b1861e457621c7ed5b9c1b74c65c6ff8a4be
SHA256

b4da6474e46d2fab5bbbdd7bf366a4ee7731b6db6c5a8cc98058c50c26922e80
SHA512

0c4bbe415c9e862198374e07d98f4cbb03f5796ccc2411622382a378f41f53d594b6bdd2ac553d702904bbd8f448ec920ca5d09e4a916f3e450131efe1b0bd87
SSDEEP

1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXik:IeklMMYJhqezw/pXzH9ik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4da6474e46d2fab5bbbdd7bf366a4ee7731b6db6c5a8cc98058c50c26922e80

Files

b4da6474e46d2fab5bbbdd7bf366a4ee7731b6db6c5a8cc98058c50c26922e80
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 50KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE