4998c221fde4a8ee33105d7d3fea456e7472c6e147ef7223410fa89c759a90d8 | Triage

Sharing

General

Target

4998c221fde4a8ee33105d7d3fea456e7472c6e147ef7223410fa89c759a90d8
Size

796KB
MD5

20e30cef7145ac197bfd438bf79ad2a7
SHA1

0fb8b4e95e028941b6089e390b32233055dc0fa5
SHA256

4998c221fde4a8ee33105d7d3fea456e7472c6e147ef7223410fa89c759a90d8
SHA512

32a16ca09f99a8deb64c8537ce60cfdb21feea904d8168829dd4f7ef6c77296f281ff14f24044ad3e6fd6cb80c407f620aa82199b37ceb9402c72b2f4eac5fec
SSDEEP

24576:QBpqiIAuM2nqsWiGj0wfw4Rbj3brMAZZW2oY31h:6zekFRH3PMD2o8h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4998c221fde4a8ee33105d7d3fea456e7472c6e147ef7223410fa89c759a90d8

Files

4998c221fde4a8ee33105d7d3fea456e7472c6e147ef7223410fa89c759a90d8
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 91KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 374KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE