4b379a8f4a6fca5785157735e64dfeb052c266898d1a01cc11cb2ca4e714dd17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b379a8f4a6fca5785157735e64dfeb052c266898d1a01cc11cb2ca4e714dd17
Size

364KB
MD5

41f66628d506427cd7ce1cdc0e08b00b
SHA1

0e48e6e29f646c41008c6ce96d2bf5840458a6dc
SHA256

4b379a8f4a6fca5785157735e64dfeb052c266898d1a01cc11cb2ca4e714dd17
SHA512

e37f9536c30f3234ca487d0fcacdd676b282d30ff140082f0876f86c6ca301e3b6e9a7ef006e2882732ec32c1f28721a1b1c8a0b1fcee10873240941dc13c734
SSDEEP

6144:d4kuRw1Yh6N6JgExcZeT/M2cx0w751GgGO9suRw1a:2w1xEgExyYUlB7hGAzw1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b379a8f4a6fca5785157735e64dfeb052c266898d1a01cc11cb2ca4e714dd17

Files

4b379a8f4a6fca5785157735e64dfeb052c266898d1a01cc11cb2ca4e714dd17
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ