4d76246dd14731exeexeexeex[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d76246dd14731exeexeexeex.exe
Size

2.0MB
MD5

4d76246dd14731d3e784a8d359993b45
SHA1

488e23c28adca8428dc9572d4e0902204175cae9
SHA256

3b36795f90c343698946269835bac52bae55722a7e95842ed9ae2e454617e499
SHA512

cbd44aff80d719bef964cc4ac7afba12d9d31f5b40919eb276d64614d018a7b2b84a564c3ce215b0799a5a86d05635728c096081ae2a7ed98a26e29e14a0f0bb
SSDEEP

24576:cnTZhlL4h/30gqreraozmLy3/WuE3IYTm/zdsx3jzYCnhRf3ydRBI7O+mbED/an4:cnT3Fq3arerNzmm/YypMTzYCnfIg+nT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d76246dd14731exeexeexeex.exe

Files

4d76246dd14731exeexeexeex.exe
.exe windows x86

264cdd1d191e755f34a059b06f20bb8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetSystemDefaultUILanguage

user32

GetProcessWindowStation

Sections

.text
Size: 704KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE