f4ea7f1f4be95b8b41edda0a6cf458494fc35dc7f92a929221133f0414e46e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4ea7f1f4be95b8b41edda0a6cf458494fc35dc7f92a929221133f0414e46e10
Size

4KB
MD5

8075aa33100db14275fbc90a4af15032
SHA1

5f59e0c9962e7d11ac63ed73a16385b34338dbe2
SHA256

f4ea7f1f4be95b8b41edda0a6cf458494fc35dc7f92a929221133f0414e46e10
SHA512

4d6ac298274158984a091a98f0a0fdac086f0b7aeb4a66ad2d0f22515cebc58a694081dd3e250d2292ba1f87eb1fee4c4dcf414a540475291cdee4a614d43c14
SSDEEP

24:eNGSONpvOb9g04wH4sTCyekge5shkPjmtOS/0mLPo:aOabv4G4OReDKshsjmj/J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4ea7f1f4be95b8b41edda0a6cf458494fc35dc7f92a929221133f0414e46e10

Files

f4ea7f1f4be95b8b41edda0a6cf458494fc35dc7f92a929221133f0414e46e10
.exe windows x64

81aeda71642cd71665790959753b78e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoDeleteDevice

Sections

.text
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ