4af681a966839bfb794759ee9f773321 | Triage

Sharing

General

Target

4af681a966839bfb794759ee9f773321
Size

959KB
MD5

4af681a966839bfb794759ee9f773321
SHA1

a3c00356cb90d7ce114b51497e07029206986d8a
SHA256

5f397374dca8583a084034b2df639957fa34d2948f5ae17c058f5a4863c231ac
SHA512

f5c839afcb97095cc03a1219d60802f3682263dca4ac798a863d260f52fbab84f614ba6dd0132abe4a8078c95ebdc266756d0d663c8b4f680f32752c3322ca65
SSDEEP

12288:s0NwwQvN6h0jNCumngV2BrfPGeFx0d7+Ss9vVGppB85msez78MIOn+rqkJ/23ltN:s0mrN3NbtFo+N1tLuqI2PFGZr+Z5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4af681a966839bfb794759ee9f773321

Files

4af681a966839bfb794759ee9f773321
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

0v],H
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ