4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7 | Triage

Sharing

General

Target

4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
Size

57KB
MD5

a5c13234f79cb73a87fa089ce87bad5c
SHA1

3c97530bbf57d3e288a7d167e278814671ce7d46
SHA256

4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
SHA512

018a49fc6af84b7cdc030810d986f2af50c493aaad01c98b021d8e2485f8b1d1706c903234746aab497a6639d507d00c9fcd9483b3836296583acd8b0d0c59cb
SSDEEP

768:6b4zb59Yix/RoyH+5flZirYqc97vFvrpaZG3DHvTdA9GgnOuS5ZFYycKZpFZx5Er:6bQx5oPsr2vFxDPhAvzgAQzFZ77k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7

Files

4c8b83c5f240edc8cc09e42b226c7436486736e4c611dc3f546e734585fbf3c7
.exe windows:5 windows x86 arch:x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

.text
Size: 37KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UIUDIIEF
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE