a4067942b30e107f2f1f8668367fea830871a1a930337a8a26c83d534a10183e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4067942b30e107f2f1f8668367fea830871a1a930337a8a26c83d534a10183e
Size

888KB
MD5

aafc799b523e926c221a59199ad47803
SHA1

51c436b9187a42b63a511f3655c37b7215d328d7
SHA256

a4067942b30e107f2f1f8668367fea830871a1a930337a8a26c83d534a10183e
SHA512

0eec1904814e8182193bb1499e35e2860804fede6566d9c4a319021b4727ebc4de2a414d87dec1f1b448ac1d60e7999886002a044496380a8d4299eac8936a25
SSDEEP

6144:kxUCCi4D9tfEJIdJslBWKqGQ9v/PVM59uABWKqGQ9v/PVM:zJslBWDGm/MzBWDGm/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4067942b30e107f2f1f8668367fea830871a1a930337a8a26c83d534a10183e

Files

a4067942b30e107f2f1f8668367fea830871a1a930337a8a26c83d534a10183e
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 464KB - Virtual size: 461KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ