044b4ff8ffa0ec6e1ebf391d362c126d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044b4ff8ffa0ec6e1ebf391d362c126d
Size

171KB
MD5

044b4ff8ffa0ec6e1ebf391d362c126d
SHA1

2579de06af5e58af1e9a19f6814bc4f43d5811cc
SHA256

7b0d221296d6b321dc0cd4acd2b6fb902eb28fcd21bad26368d07b389dcd9a64
SHA512

cfd6af3d8858b01d60c1aa6c47433ec83ccc18e83458663029bd9faaddf6fbb87d15c38e4f50b6c63de5f11098e1731339533fb961fd79c4adb9d858b5ce0206
SSDEEP

3072:RtpTYCb50ygtbntomIxNvQrZ0my52YBBmMAhobu7TkEqraxekkh03DlmPC:eCNuhnqnbPT7MYWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044b4ff8ffa0ec6e1ebf391d362c126d

Files

044b4ff8ffa0ec6e1ebf391d362c126d
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE