4DCFFCEE1408FC249E0D85D8587739A9[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4DCFFCEE1408FC249E0D85D8587739A9.exe
Size

1.2MB
MD5

4dcffcee1408fc249e0d85d8587739a9
SHA1

5d3b0c8cab3564e105b1aec00723bf6be3582d81
SHA256

cfc7f90046252458d74eb83b86392549318215caed0e7ab105e8954858a3c7bf
SHA512

03ecb168c3d89a80074feb2f0d4436b65608eda910434f891c55f26b5b86bf89cc6f4e4967587e8870cc30f6e08581ee7f8d390646059e4a7eaa654e0efc14e1
SSDEEP

24576:JL8rxwyhjDZjFTgYTpseCu7RN6BakxUwIVTgcp:JL8rGKHYYTyeR7RN6RIVT7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4DCFFCEE1408FC249E0D85D8587739A9.exe

Files

4DCFFCEE1408FC249E0D85D8587739A9.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 365KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ