4a42372cd8a8962e569cdedd084891db | Triage

Sharing

General

Target

4a42372cd8a8962e569cdedd084891db
Size

560KB
MD5

4a42372cd8a8962e569cdedd084891db
SHA1

0a48a4498111485121f19f4fe3fb804fb2f8bc97
SHA256

7110e7ba940275b548a0db57dcb4bf7dd0656b5532c3a25358a6b8cec0e38984
SHA512

e716b1c61e084571d1ae60ffebfa9159c1f2927123cffb6ef87af47e5dfd8b81463f46186f0cf584e438704d55586f80ddafec83096281d6d7e19aafc4ef2d64
SSDEEP

6144:TkU+PqJdRGW6h3WCqQgVOq4rbgZBcA1LiC1kStX344DWV/b5eY:YUtRA3WCCVr14SVF0MY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a42372cd8a8962e569cdedd084891db

Files

4a42372cd8a8962e569cdedd084891db
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 252KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE