4e5f8a59113255d5a2e092b8648189fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e5f8a59113255d5a2e092b8648189fc
Size

797KB
MD5

4e5f8a59113255d5a2e092b8648189fc
SHA1

3da8b2e063805b3f4613e92608b91bcdf427610a
SHA256

20ed98eb517f9cec9d1b16977f172f5df2bec43076830074960d1954dfe5fa0d
SHA512

6062404cfc4382302933b6fbaddb365522818c27469cdd6f9a0baff36b461a107246a615f3f805fb21bb2e3f2866ff0e5b308713d670d44d1787a58840e330eb
SSDEEP

12288:3ftQyRRNr9a1jZXUQmJhjxTOtoWr7/VrSg90yxTl3fx:PtNRR8ZUQ6TOtoWrxWg9dFlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e5f8a59113255d5a2e092b8648189fc

Files

4e5f8a59113255d5a2e092b8648189fc
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

?interfaceMap@CCustomControlSite@@1UAFX_INTERFACEMAP@@B

Sections

.text
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE