4bf644ddbd578d858112f33d7ea7453a | Triage

Sharing

General

Target

4bf644ddbd578d858112f33d7ea7453a
Size

961KB
MD5

4bf644ddbd578d858112f33d7ea7453a
SHA1

9bd2f4c84663cd538fd82b94b2868fd8bf27dd8b
SHA256

94862cec99c305ccc6c2903fc7332de175bfcf27cc8bd7182daf4354e3d4c440
SHA512

f115c69e9fc0f1637674aaf105e90caf9ff089c5904ce84e121f7b435ed427739f1e7b3a5a9ddbd3b55a8e60efb014549df66c1f0b702e0860bcb161501421b6
SSDEEP

24576:NH+eTWnKZyR313p6S++HvJgtQW1MJ2MZnblf2IDYg:BTWnKZyR313pVzhg71MD+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf644ddbd578d858112f33d7ea7453a

Files

4bf644ddbd578d858112f33d7ea7453a
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ