b4987917feda1ac0faa16df0df2daa7186091ab7dc284a7dd7ac68fab8f2e37c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4987917feda1ac0faa16df0df2daa7186091ab7dc284a7dd7ac68fab8f2e37c
Size

5.0MB
MD5

77a40e73e9e2ff4395f349f67b72bd29
SHA1

df5bc2f5b08789ea52051a418bd297933377d7d0
SHA256

b4987917feda1ac0faa16df0df2daa7186091ab7dc284a7dd7ac68fab8f2e37c
SHA512

9bb4a7b31149fc0a14907830e923257015d5ece566288012f30aa79e0fd2e069b66704f50e2906123b2b87b5a7b2b6c7dc475f119006140ebc11d0ae774e134f
SSDEEP

49152:CEJbMFZItMLliMi3KgTs7cF3dtaSCrL5:CEJbMEMRiMi1s83dYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4987917feda1ac0faa16df0df2daa7186091ab7dc284a7dd7ac68fab8f2e37c

Files

b4987917feda1ac0faa16df0df2daa7186091ab7dc284a7dd7ac68fab8f2e37c
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

lswang
Size: 616KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 760KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lswang
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ