4cdc1bcb875bad12601a992611030a6ffd3fc647b87ef094296dbb7c16119e58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cdc1bcb875bad12601a992611030a6ffd3fc647b87ef094296dbb7c16119e58
Size

44KB
MD5

a21145dce114e093ea4768d8f957ba32
SHA1

d12df3ddc80cda0855effc7af35fc109b7d57720
SHA256

4cdc1bcb875bad12601a992611030a6ffd3fc647b87ef094296dbb7c16119e58
SHA512

17e3162ac31e5f963099aad030384015c8f5669e652c47c30259600b4e0d545f0226a772149ef59b53aa71bd89a4a684466cb9e0fba6fd03318674ecdc4d1f80
SSDEEP

384:sbOsBq9jlLozLCXAtG3cDEiS3MWtqkQ+sf2IjidjV3gYXo4m4m4m4GCyzZoV:hoiXVz3MUqWI6jmY44m4m4m4PU2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cdc1bcb875bad12601a992611030a6ffd3fc647b87ef094296dbb7c16119e58

Files

4cdc1bcb875bad12601a992611030a6ffd3fc647b87ef094296dbb7c16119e58
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE