4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4.exe
Size

63KB
MD5

f3b5bd194bcbcfd1aff577cf00f25cef
SHA1

701d495f8ab9a72100c9f896f2bc16d1a1f27c42
SHA256

9c90156b696915512de999332dcfcf5f7bca8e2d77d592685665b676fb5b915c
SHA512

cc6b74f437b73fe473eb0f83a59709f6e428f1c47ea3809732a7626b6e16dde7e22f496035e76d4118fc6a282fd96aa6dab9e6c331d580402b5c34ec64f53145
SSDEEP

768:sqUH5NpkfkeKD5gsvMXW/pidoi1ZS2PRZ1k00eL0uH8y1BMhWiaG3:OH5NaKD5gsvY4p6oCZ7ll0osW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4.exe

Files

4.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ