4822688facaababe999deba9dbbe5c59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4822688facaababe999deba9dbbe5c59
Size

66KB
MD5

4822688facaababe999deba9dbbe5c59
SHA1

07793073fa169e0da8631be1b76db4a411b53a43
SHA256

7c36a66f93af79f4bad1880e277cb474a2d18c411c6d0eb6913559cd0dc74704
SHA512

305704e246021d1b05ab202d2eddc20b8636a9dc09115f6f8a3e53edbc65f5078fb211e0edc782d8738d968afc4549aab1f831b85737110b425757d5fa279804
SSDEEP

1536:cCh0qidXBezC5s5LHg5SiHCj/KKdTusyOgKvg:IXBB5s5QSweusbgKvg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4822688facaababe999deba9dbbe5c59

Files

4822688facaababe999deba9dbbe5c59
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ