4c9f9c402a5bbdca3974052b202c1acd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c9f9c402a5bbdca3974052b202c1acd
Size

2.3MB
MD5

4c9f9c402a5bbdca3974052b202c1acd
SHA1

63d0c5e8d382ded7aac6e2c6af5d3a06655a747f
SHA256

8603c0ac1e1b1d9f7f4b1c525746730b6a644a1d76b85bc66dd9557a8381080c
SHA512

892e51424c26603918be4d80c7755f8d1aabd2a01544435bf5ebd0fd34cd8fd0898c79fcd0a396f4aae74dc64b432ab65d1e1e7a12dc0ba887c7e56500b37fcb
SSDEEP

49152:qGaQngp+ZT5Zwwi6WBoINanXrAhzKGZAOra6MF0NgQntWQD7:7aUgp+VE6WBoINany2GZAhFFKv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c9f9c402a5bbdca3974052b202c1acd

Files

4c9f9c402a5bbdca3974052b202c1acd
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ