4c79eb479f56b6baad0c2a0c81cbec24c13f03a33b463af462a9df47a47883f8N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c79eb479f56b6baad0c2a0c81cbec24c13f03a33b463af462a9df47a47883f8N
Size

160KB
MD5

f92e1362170516730416f9a5dfa8fcd0
SHA1

6214d8eb6e755d83cfc866ddd573e6418aeeee11
SHA256

4c79eb479f56b6baad0c2a0c81cbec24c13f03a33b463af462a9df47a47883f8
SHA512

b6714d3724bc3ac21f87ecec9a48f9a1aa72ac482c93e6b43256b9a2de93835a50e1a5885680f143f49a043db3096b5c74ec07c94729083e763ebb7ae1e40df6
SSDEEP

3072:5KEEaR5/hXvI/E0wJJVi2jRLCE7NEhPUkW6LvXxE07zQH:XEmhN0a7CEiVUh6ZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c79eb479f56b6baad0c2a0c81cbec24c13f03a33b463af462a9df47a47883f8N

Files

4c79eb479f56b6baad0c2a0c81cbec24c13f03a33b463af462a9df47a47883f8N
.exe windows:4 windows x86 arch:x86

6ad6a151c1bbef1909962b1cf62fad77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateMutexA
OpenMutexA
CreateProcessA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
strcpy
malloc
strlen
memset
srand
time
atol
printf
free
memcpy
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ