4af37cf61ea93d5b3aa752215263f88a0b3f9336b0850e5e84f70e0bf231674f | Triage

Sharing

General

Target

4af37cf61ea93d5b3aa752215263f88a0b3f9336b0850e5e84f70e0bf231674f
Size

390KB
MD5

34e585d1b8f061f7498bf1124510cc03
SHA1

4472e36cee947a895ca37597d69e87fcf0861689
SHA256

4af37cf61ea93d5b3aa752215263f88a0b3f9336b0850e5e84f70e0bf231674f
SHA512

f369ff9d6992ce2407c12203ff064ccaf4bf5c29b866f066a9c6935209a7cdfe83b72dcd75f071a0d37e3acb751e1075c8179be3d2d4855383c299c1787425c9
SSDEEP

6144:fx1LxHy2V5IKAT+fUN2OUxIxkWQNZrGq1cpF2lxO3g:7o2AH+BQENFGq1i2lxp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af37cf61ea93d5b3aa752215263f88a0b3f9336b0850e5e84f70e0bf231674f

Files

4af37cf61ea93d5b3aa752215263f88a0b3f9336b0850e5e84f70e0bf231674f
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 346KB - Virtual size: 349KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jkqvbz
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE