4cbae6bba350f0f16b019d41c6083798 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4cbae6bba350f0f16b019d41c6083798
Size

776KB
MD5

4cbae6bba350f0f16b019d41c6083798
SHA1

dfc181e3b474fd8177836ed0a7603d14c0d0c829
SHA256

2107292a25925410e02086309e51c496134807ed5a6b29b1d30e2c30ae709546
SHA512

ff2637639bd8fcf202fc7d89ab0896343f35a96b6b942f9c2e2a32dc953354bfebd90da904e91075eaf7fa759892e80be2aa29f933ec4eb2733f2f5e4341820b
SSDEEP

24576:nJfsJG8a1BUt95jrs/XqeZp+Sl/Ce7GsoHjDP3dgBXN+2:nJfsZ5xrsCWl7G9HXPtgB9+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cbae6bba350f0f16b019d41c6083798

Files

4cbae6bba350f0f16b019d41c6083798
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ