4990830744fed2f2a532f394f5bffbef | Triage

Sharing

General

Target

4990830744fed2f2a532f394f5bffbef
Size

236KB
MD5

4990830744fed2f2a532f394f5bffbef
SHA1

ec8c981313a95584ef9ef4b3c8b33f8b11e258fc
SHA256

c25f30f05497f71531e6f64731c9b919b6b2230d65383ab80c3a2f90ec0aa909
SHA512

8108cecefab79bc3fd226af46f4a997996b6269080212b68f5e110472c96c1d8175bc8acf1d1b7510583de266c36740d2ea2ff264b35ae90c5ee907890946d9c
SSDEEP

6144:8NspIVQdJfENUMclMVN5bNdxBUMwYkBovin1uHB:8itJfa1FNZfwYkia14

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4990830744fed2f2a532f394f5bffbef

Files

4990830744fed2f2a532f394f5bffbef
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 117KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE