4ddb842024d57a6c8249961aeb5bb869 | Triage

Sharing

General

Target

4ddb842024d57a6c8249961aeb5bb869
Size

195KB
MD5

4ddb842024d57a6c8249961aeb5bb869
SHA1

7a089f0dffffba49eb158dc031d64e62b5e077ee
SHA256

159acaa44e57684ba6e255f631a95d69308e368b7f4f00b209eef022e6842897
SHA512

ad33147b7d041247452a293e2728d1e815fb6558d72c3d9e0f9930766f0560100a69ad9e87e58288fb257fae350458b6d9d2f2e34261851cd3123491d41bf969
SSDEEP

6144:XPr9OHU7sKIJFxYMEqUFYvgLIIaTDefpr:TLdI5HE1FYILgTDSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ddb842024d57a6c8249961aeb5bb869

Files

4ddb842024d57a6c8249961aeb5bb869
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gda
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE