4dc314021d484d954b44bedc01e70bf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dc314021d484d954b44bedc01e70bf2
Size

10KB
MD5

4dc314021d484d954b44bedc01e70bf2
SHA1

2e6b9ae20ffd71f0ecb9953f45a28a6b31848896
SHA256

8f5c2d2bd080111008a14f16ec4fdf7d819f86f68c449958f521877d14395070
SHA512

91588abd0f937db1c0e74a0c17d8899af3ae26cb3e0eb1f45726f61536352b1b3b814fcfa0d629bc52e2671170104e828deaf83665a793e2ab994b7725f72351
SSDEEP

192:F/vHc6Ed/bMC5FGo7GTeKOU5DiTY1oj6kBoxZrFeuidXjtT:Bv862bt3ryT4U+Tt6CUeVdXjh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pnewq97o.exe

Files

4dc314021d484d954b44bedc01e70bf2
.zip
Pnewq97o.exe
.exe windows:4 windows x86 arch:x86

8d02900d83d365ec056739555d54b494

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord100
ord199
ord561
ord581
ord598
ord595
ord608
ord613

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ