4b70ab7fe4d2bd68fcc26e2169085ef6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b70ab7fe4d2bd68fcc26e2169085ef6
Size

1013KB
MD5

4b70ab7fe4d2bd68fcc26e2169085ef6
SHA1

1c6de656e394542f4af9632f15481701283b2a2c
SHA256

159b60d560d7b63de9e6f042c77a157adf750fa7272702e340d89c9f5d74c2bf
SHA512

0cb83848661d7c65b3e7090e456981e270c4073fe1a448340f4ba0dd6a0d2096fb48a1dbbc5fbd2e3f98d56aecb73bf8c8a7f983df97d05210b81ca2095aaff7
SSDEEP

12288:Nxftv8cazumU51kRLGJvXf0nbhfDmMp58RvYxb8c+WxDGQWH179ZBXH/EG+:NJtUcazumXRLssVf1kYxI7Hh9ZBXfH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b70ab7fe4d2bd68fcc26e2169085ef6

Files

4b70ab7fe4d2bd68fcc26e2169085ef6
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 256B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ