c4abaf508b820dd14344bc160e190c0f72cc5309548880b7cfb4d88e1533e2cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4abaf508b820dd14344bc160e190c0f72cc5309548880b7cfb4d88e1533e2cd
Size

3.4MB
MD5

69de6a3e324e07c1c92b544b09bb1cd9
SHA1

7812da50ed4711c226987398952563a4c7aaa906
SHA256

c4abaf508b820dd14344bc160e190c0f72cc5309548880b7cfb4d88e1533e2cd
SHA512

171b74e4f0378dcee8140a1af6b76d083e8dbb70bcafff40cda534c2f3add31e29aa090615579aec6960b8879703b1cf97d893b024fe00c7a6f5811334304b19
SSDEEP

49152:H7TvfU+8X9GrNOsva5RbKhF3ANkTTl6Cn+e1WwNh9RBZLXjBpy:c+8X9G3vP3AMz1Wch9RXXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4abaf508b820dd14344bc160e190c0f72cc5309548880b7cfb4d88e1533e2cd

Files

c4abaf508b820dd14344bc160e190c0f72cc5309548880b7cfb4d88e1533e2cd
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ