4c149889c82f4fe5cbaaab410f0d79bc | Triage

Sharing

General

Target

4c149889c82f4fe5cbaaab410f0d79bc
Size

204KB
MD5

4c149889c82f4fe5cbaaab410f0d79bc
SHA1

c712f9c5afe8a63ba6dc5c28e86a7b9eecd424e8
SHA256

e6216450b60eeb3bea0ca40b48356610a1396083d870364e48a19408b8ab4635
SHA512

97bc1375faf432a7aed3c00c5c0880d85958c6eff5cf6aaddac4d927f71b7e8e321161d17ab64b4f2894dc856766cd1a68c9510c49e012de4d626ec1f3993af3
SSDEEP

6144:EH2/BaCg4sfLjRvUWnMQJVXoC/aoYwF4aJxS:E4Vg4OLjpPnMACC/ZYwFXPS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c149889c82f4fe5cbaaab410f0d79bc

Files

4c149889c82f4fe5cbaaab410f0d79bc
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 700KB - Virtual size: 700KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ