4fa16a4e04e7a9d4f9e7150ceae62c20_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4fa16a4e04e7a9d4f9e7150ceae62c20_exe32.exe
Size

227KB
MD5

4fa16a4e04e7a9d4f9e7150ceae62c20
SHA1

a4e7abcbe12ff0911a7ffa9cf125ac0b45912c05
SHA256

00bb2f657d3eba2ea3a74f97e79dce8850514081f555f9f4669359b303963304
SHA512

ec244bfb6d0038492a72bf66372ce44618cc9e11d8f45ee988e8786334b2871f8cfcbdbe95b2af85eecea41cf7dba1192b968e6872b472cc4a3c3bef42e82442
SSDEEP

6144:0R8fV0zx/DvqvqvzEdAYohZQGAoKKaPCAY+17fbxUwXgw9/q:+WWAdAYZGDMCby7zawwO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fa16a4e04e7a9d4f9e7150ceae62c20_exe32.exe

Files

4fa16a4e04e7a9d4f9e7150ceae62c20_exe32.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ