4889e406b015dce5291411a0f210fdb8 | Triage

Sharing

General

Target

4889e406b015dce5291411a0f210fdb8
Size

385KB
MD5

4889e406b015dce5291411a0f210fdb8
SHA1

476af05b8bf9244e8340c516fa54ffe4e4f7333d
SHA256

abd961ca505f441c0beaecb509bf4b2abc56b22835263672777a48e7f3dec2da
SHA512

fbd81f659b1ec83b901378580f1f394f9577c1874a854e8f9fb3b57ff5c00e64af6a8c7ee256b18a948bc73f1553583ac127e5cf1e088bf42ec6f1a2ed29b7ff
SSDEEP

6144:1RFz4v0p3axGd66rQpTjek9ISnLcNI9jWDyX5PUadTr2LNP3VD2B:1jz4spYFVek9jLcegyPUadPI3VSB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4889e406b015dce5291411a0f210fdb8

Files

4889e406b015dce5291411a0f210fdb8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ