4f3298a27e99ba4b91b4fceff9a40980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f3298a27e99ba4b91b4fceff9a40980
Size

5.1MB
MD5

4f3298a27e99ba4b91b4fceff9a40980
SHA1

c64318cb1748e19649c6c56697bb07956b74838a
SHA256

e3ebca202d1c7bd5b786736356b862c0e0579393a6f2f5a8c1c184498affe3a8
SHA512

5ee8e86c714084820e445ba4f43a56a23ec8ce1496a692d439fc0cb7b57e3512e100f440b4d7635d31d8f36951ceea5c1e8028dd1d539c017e1d00ac0444404a
SSDEEP

98304:YA9EN1fqavEfyuw028zv4EW2URGtoExkGAUUEup:ZS1fqmEfylURW2FxkBXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f3298a27e99ba4b91b4fceff9a40980

Files

4f3298a27e99ba4b91b4fceff9a40980
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.Upack
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.!rc!
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dswlab
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 693KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CRPT
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE