4[.]exe | Triage

Sharing

General

Target

4.exe
Size

13.3MB
MD5

1d911a4603fc7de741f88b8cdc3e0e86
SHA1

a7f7e9460a0ff6b8575a6cabffebc2846f8cb190
SHA256

5c759d9622b5cb2ce3ae330e8c7bf0a54fa4523108cfce96950037c6935dcf96
SHA512

2d5b25007ec07f66ab879ce94c4a388473dc7b639437b67714a33ae3231950d390e736717bbf013de9e87cc548843477f4956e592cf176fd888c8d0b41c26b07
SSDEEP

393216:UkwNcdTv4FUQU3v846usXsL/cg6DBwPtZQ:c4VsXsTcg6dwPtZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4.exe

Files

4.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DE0
Size: - Virtual size: 13.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DE1
Size: 13.0MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ