4cb94bf783b1f176e8935f61ef4d562e2ca41b0d98c35450f20889bcc14f86c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cb94bf783b1f176e8935f61ef4d562e2ca41b0d98c35450f20889bcc14f86c5
Size

734KB
MD5

202ef97b5278ef69b0af392a07c1a6cd
SHA1

354fdce5f44bf38a3c0dafd7a6c3823626c385a4
SHA256

4cb94bf783b1f176e8935f61ef4d562e2ca41b0d98c35450f20889bcc14f86c5
SHA512

6971d447a153290983cf8882c81d5c5332a26e7d539ce11a096ddd4fca314ddf69e77d568cacb0cda98e72450eff1fb710c8caf370b4a5601e0b31a2568b52ba
SSDEEP

12288:EkyFSXVbqzKf8S/xkbBeFrK09e7AT+pW6CVSxKupbU1EY0zXWH3DwedK7w:ECmz6rL2ATfbDupgizX+DwC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/n0t6KQiluA8LgQ7.exe

Files

4cb94bf783b1f176e8935f61ef4d562e2ca41b0d98c35450f20889bcc14f86c5
.zip
n0t6KQiluA8LgQ7.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 819KB - Virtual size: 818KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ