e4a1248e3564699aeea1a4457dfe6b2c899378ac6cac8ee667adafe5f0a2c236 | Triage

Sharing

General

Target

e4a1248e3564699aeea1a4457dfe6b2c899378ac6cac8ee667adafe5f0a2c236
Size

1.1MB
MD5

4b746394d8cb46ecfb9eee1ad43c677b
SHA1

8bee515b751c575c6b2f34af0ebf15dd73161599
SHA256

e4a1248e3564699aeea1a4457dfe6b2c899378ac6cac8ee667adafe5f0a2c236
SHA512

b4e3d80d6cc3cd4e57e20506958ac652c6c330e4efa35689c1328789ff7200bd208d19e18dc6eaa437f46963a30a7e718aabee25537d17cba381c115d6be8d9f
SSDEEP

24576:qI4rHI4rPq/ogIV+BVOU+Oy9pyUo5hhF:4fwOU+O8QJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4a1248e3564699aeea1a4457dfe6b2c899378ac6cac8ee667adafe5f0a2c236

Files

e4a1248e3564699aeea1a4457dfe6b2c899378ac6cac8ee667adafe5f0a2c236
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 348KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 624KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE