4cfb01e9985124aa8b25af4c03430f63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cfb01e9985124aa8b25af4c03430f63
Size

971KB
MD5

4cfb01e9985124aa8b25af4c03430f63
SHA1

f804254941962cc4f1232b2683be911dfa63428b
SHA256

dbae8974d8675917d893d9b24085617a3de30f86d765cf2b90ed6c8e4937117d
SHA512

c2b112282dceb426e572fd5746d191a6290fb3f95c208fca59aebc25e282aba793d9c09c47455442058f4adc7c7395a60d6a4b30da460bd90b744f26e2c60e6b
SSDEEP

24576:7lXVn7DhalXnJUhw8Twt9AtA34MlHLNcybcHL7o:pVn3hal3JUhFTxtK1lrNcJHLk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cfb01e9985124aa8b25af4c03430f63

Files

4cfb01e9985124aa8b25af4c03430f63
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 918KB - Virtual size: 917KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ