b4f9cfcea140c5804a80c1174713a6de914d1017d3e73d7a724a2aaf28e079f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f9cfcea140c5804a80c1174713a6de914d1017d3e73d7a724a2aaf28e079f5
Size

4.0MB
MD5

b7ade2f34ca7316997d26c8e8ed00f40
SHA1

266502d92aa939f90df8488852c1bfe053a55095
SHA256

b4f9cfcea140c5804a80c1174713a6de914d1017d3e73d7a724a2aaf28e079f5
SHA512

bacb25961c49fcede94bb32f5e825353c17df3e9580c190d5e05875e28205a8a346fa0f0f0ca68366fbcbed35cf455a79187e1027d570bf5adb977b56f63f859
SSDEEP

98304:KeQWCiX/5wFkZ4S6xNXVQ0mjEiUkwOgJrjk26RtPNh:oWv5wq36hXvO4cv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4f9cfcea140c5804a80c1174713a6de914d1017d3e73d7a724a2aaf28e079f5

Files

b4f9cfcea140c5804a80c1174713a6de914d1017d3e73d7a724a2aaf28e079f5
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ