4b6ed0bd80759105007edcd882e36517965316dd4ec5fc58a2ac667f025784cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b6ed0bd80759105007edcd882e36517965316dd4ec5fc58a2ac667f025784cc
Size

66KB
MD5

b4f91352c67f7fc13334db234ec4e5fc
SHA1

580dc8dc6c9a5625c0952d8163a28bfcd0a6a386
SHA256

4b6ed0bd80759105007edcd882e36517965316dd4ec5fc58a2ac667f025784cc
SHA512

acf722505ff0daec0d9d869ba4d624b019f61352b2a3c2fd59c5c9a5ad4d67fbd65027e2f185f9a2a29bf4bc0796772a1ff63313510e4b162f68ded71602c91b
SSDEEP

1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXi0:IeklMMYJhqezw/pXzH9i0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b6ed0bd80759105007edcd882e36517965316dd4ec5fc58a2ac667f025784cc

Files

4b6ed0bd80759105007edcd882e36517965316dd4ec5fc58a2ac667f025784cc
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 50KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE