4abbc777a76145c8cdb16adc95b551a4b6f65b31ae29f1a534fa0610cbd615f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4abbc777a76145c8cdb16adc95b551a4b6f65b31ae29f1a534fa0610cbd615f4
Size

4.3MB
MD5

56a6313a62ea8d5f50a5873691fc0338
SHA1

5517fa345dfbd752343ab5d3a67931f7e45c9d96
SHA256

4abbc777a76145c8cdb16adc95b551a4b6f65b31ae29f1a534fa0610cbd615f4
SHA512

49fe43abfb2436d064fd4fb0b4cb3d951952f95c0af2ef2fb5b67423fe97357b696ec2b3dfa9ba51a4b22288d1b21effeade2601d40e592909bfc1b0dc515140
SSDEEP

49152:ne8JwBAIr3sI+fZl+s+G7GuRz0PNcW4oVD2jsJ0R3yQ84IAOL8G7GzOkKbYz6:dJwBZ3sHz+ZGim0+aqj3RrFIqG7A6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4abbc777a76145c8cdb16adc95b551a4b6f65b31ae29f1a534fa0610cbd615f4

Files

4abbc777a76145c8cdb16adc95b551a4b6f65b31ae29f1a534fa0610cbd615f4
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_READ

VProtect
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 1.7MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VProtect
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ

VProtect
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_MEM_READ

VProtect
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE