4f425fe595ce9792f89ce74224f97c90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f425fe595ce9792f89ce74224f97c90N.exe
Size

148KB
MD5

4f425fe595ce9792f89ce74224f97c90
SHA1

186eddff49f311b82415203a81f3386f1ab85cac
SHA256

a62bbd1b69c8bbc7fe2f3f0e7b5ce7377d1e71a36331816457f9a48e155fd09e
SHA512

f3718c6c884b16adc3fca95e9d84c46a50c76f98aa0f33a2599123fc5f61cdb3697cd9e3d7a78976860b5d8b0eabb4fef7743ec7a4ec47803777270e9cbbf099
SSDEEP

3072:iO89PRbSsCH6bifYCmoFuihpDY76IIXBJPqcSTfG:eZ2qihpD+QP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f425fe595ce9792f89ce74224f97c90N.exe

Files

4f425fe595ce9792f89ce74224f97c90N.exe
.dll windows:6 windows x86 arch:x86

20e3738a9fffa0250845e3b880caabfc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

msjint40.pdb

Imports

kernel32

DisableThreadLibraryCalls
LoadResource
LockResource
FindResourceA
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent

Exports

Exports

CchLszOfId2

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ