4f58a41ee4d24e9f45ca1e4abdb58206 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f58a41ee4d24e9f45ca1e4abdb58206
Size

2.8MB
MD5

4f58a41ee4d24e9f45ca1e4abdb58206
SHA1

1b028cbb26b7ffb7e14491068ebccd2d1fd291a6
SHA256

6485e8fba7f0325da9eb6465716b46d4642bf045a524c0f6ec68c30c559a92be
SHA512

1f19d98f37b7bc620319c5bf719d2fa9b076f45cca75f418a2baf3c2a52bb1ebc7f39c095bcc0605d82a35bcaaa2c1edddfd4f13822e18fd0fce73b4d4999d16
SSDEEP

49152:cMRv/TZm8+3ATm8325fhSVPAMydYdc0mRyBXAleFNvIDln:cMRg8+Qj3G5oydYdj7Ayv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f58a41ee4d24e9f45ca1e4abdb58206

Files

4f58a41ee4d24e9f45ca1e4abdb58206
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 291KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ