0204941eab0a048582e86ededc405842 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0204941eab0a048582e86ededc405842
Size

68KB
MD5

0204941eab0a048582e86ededc405842
SHA1

44c385e8b93f8acfd0245a5f2f15d977934088db
SHA256

1b14dfadef3fba940709bd1c3d1f69718f2f2f1ac2aa230a24fc1abb3468b780
SHA512

ee24f1c6a9423e73bcde7fb64ebff6176c38d1672cbe20593b1f6ebf0c91d5b4d2645940f2ea8307b08a64114f6020bcd7a954b413e27486687855c42e93e023
SSDEEP

1536:bB+TbQQNuWt3HBetxlboDy/1G08vbIaFtI:N+vQyuW3HBUx5R1GfTI0I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0204941eab0a048582e86ededc405842

Files

0204941eab0a048582e86ededc405842
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 375KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ