4042156172a5c0ac6c9411c57a452d69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4042156172a5c0ac6c9411c57a452d69
Size

476KB
MD5

4042156172a5c0ac6c9411c57a452d69
SHA1

0402c055b493692a2dfa30149cbaf69ad3a4bcc7
SHA256

e6f3f368cc3d1e6bad805a76baa8e28ff3b4f22958fabc99aba341859b6752c3
SHA512

3ac7fa98d8c905695e721d83b43c21162da3c6e779dba95946a3b6e0885bf505dbaad0a31abbf23ea08cc5f253bb9c17b266f7d89ffe5cb2ce2d3a439a42d2fa
SSDEEP

12288:a3taORhPVcmcjwNRkwfJptUO76UJ4roU7h7AN3gB+M9eZaPRsXvo0AKqgqVc:a3kOTKUYAC9UAoShsKB+ML/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4042156172a5c0ac6c9411c57a452d69

Files

4042156172a5c0ac6c9411c57a452d69
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.y
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.q
Size: 512B - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE