c4da499092f44956fd997040d0f659a9d48431699de976b8f7daf3729c69156c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4da499092f44956fd997040d0f659a9d48431699de976b8f7daf3729c69156c
Size

478KB
MD5

bf21cb736e379aefb72c0c6c4fc460b3
SHA1

dacc4497a5521362b2f05f3bf50ed59867adc2e0
SHA256

c4da499092f44956fd997040d0f659a9d48431699de976b8f7daf3729c69156c
SHA512

5a142c513bace4cb7fa18a8abf873a4399c353b51369a05ee063126249428886a9f7f5ea373051ac4b690cb1e2981f75b86c571414d68f488acce72f6cc69efb
SSDEEP

12288:x1QLFeeRisK2hfr5FVum5MA4m7iCxvzjb8lejeCNFnIBqn:x1QLYeRisKs5rMtm7PdI6XIYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO OAU_NOVQTRFA00541·PDF.scr

Files

c4da499092f44956fd997040d0f659a9d48431699de976b8f7daf3729c69156c
.rar
PO OAU_NOVQTRFA00541·PDF.scr
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 646KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 327KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ