4e21b3dd46284e9add35efc082ea92cd3f5fec19b2d6021cdb25c7a4c74aecba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e21b3dd46284e9add35efc082ea92cd3f5fec19b2d6021cdb25c7a4c74aecba
Size

47KB
MD5

ca9538371d94b6c0b3dd409d8e2f3700
SHA1

9a91d1fad2537dc13623d37bcbbeacece03ee63d
SHA256

4e21b3dd46284e9add35efc082ea92cd3f5fec19b2d6021cdb25c7a4c74aecba
SHA512

d5e3a006b08aa160f603a3aa0f9fefb8da00512e4aae16a413a020d88cb501c676bc0321d65e4880a8332c146e607f84d19a3d2c0f0b69ebd02600bcfae19033
SSDEEP

768:XsM+tJffeGKYCvBAmCoDeh2mkpSqshik8Tv8:Xs1/Cvoh25cqgik

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e21b3dd46284e9add35efc082ea92cd3f5fec19b2d6021cdb25c7a4c74aecba

Files

4e21b3dd46284e9add35efc082ea92cd3f5fec19b2d6021cdb25c7a4c74aecba
.exe windows:5 windows x86 arch:x86

833d7306a9c3cb9f31a38d6f9680b4bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
HeapSetInformation
FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
CloseHandle
CreateFileA
lstrcatA
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
GetEnvironmentVariableA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ