4b539f5442a33dabe3e9c30ebe689601d80853a8ab8993bb53038d9c7b0265c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b539f5442a33dabe3e9c30ebe689601d80853a8ab8993bb53038d9c7b0265c5
Size

63KB
MD5

8e3dfdebe32dd5a198fd00b75cc44139
SHA1

a4ec5b5122beebcfa32db48c9f60909a85a2f3bc
SHA256

4b539f5442a33dabe3e9c30ebe689601d80853a8ab8993bb53038d9c7b0265c5
SHA512

81a0f2e599af9d9486cf7f1f2c3a85f4aeaad764e042305f75ae36a7ea35f3cb328712137279587b9246ff673b5b69b5a55e73c777d5c461884a273459d3b6fd
SSDEEP

1536:kxAk0er2Qs8068Bxm61Bf85Rn56ixQ4UqNiW/92mu:EAkr2LRBYiBvv4Uh5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b539f5442a33dabe3e9c30ebe689601d80853a8ab8993bb53038d9c7b0265c5

Files

4b539f5442a33dabe3e9c30ebe689601d80853a8ab8993bb53038d9c7b0265c5
.exe windows:4 windows x86 arch:x86

48e48bca99fc6b2db9ba20e71e99b899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadPriorityBoost
TlsFree
GetComputerNameExA
K32GetModuleBaseNameA
GetConsoleInputExeNameA
WritePrivateProfileStringA
WerUnregisterAppLocalDump
GetFirmwareEnvironmentVariableExW
TzSpecificLocalTimeToSystemTimeEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE